Which is the better way of generating a salt string? Using T-SQL as per the snippets below, which method is superior (or is it a tie)?
 -- method 1: DIY 
 SET @Salt = ''
 WHILE LEN(@Salt) &lt; 72
 BEGIN
   SET @Salt = @Salt + CHAR(CONVERT(INT, Floor(RAND() * (126.0 - 33 + 1) + 33)))
 END


 -- method 2: concatenating 2 GUIDs
 SET @Salt = CONVERT(VARCHAR(36), NEWID()) + CONVERT(VARCHAR(36), NEWID())```
Neither. The RAND function in method 1 isn't cryptographically random; the GUID generation is only random with version 4, and isn't guaranteed to be of cryptographic quality.