It's just a randomly generated 32 chars and most if all the salts can be changed on the fly. The only one that should be generated once and never changed is AtRestEncryptKey since it's used as a bi-di encrypt key. Currently AtRestEncryptKey isn't used in the product, but it may be used in the future.
↧
How exactly does salt rotation work? What is the format?
↧