title: yii CPasswordHelper: hashPassword and verifyPassword
body: <p>I think I'm missing something critical here. In the <a href="https://github.com/yiisoft/yii/blob/1.1.14/framework/utils/CPasswordHelper.php#L90" rel="nofollow"><code>CPasswordHelper::hashPassword</code></a> function we have lines:</p>
  
  <pre><code>$salt=self::generateSalt($cost);  
  $hash=crypt($password,$salt);  
  
  return $hash;
  </code></pre>
  
  <p>And in the <a href="https://github.com/yiisoft/yii/blob/1.1.14/framework/utils/CPasswordHelper.php#L110" rel="nofollow"><code>CPasswordHelper::verifyPassword</code></a> there is this line:</p>
  
  <pre><code>$test=crypt($password,$hash);  
  
  return self::same($test, $hash);
  </code></pre>
  
  <p>What about the salt? To my understanding its not even beeing kept, but it doesn't make any sense, so I'm guessing I didn't understand it completely.</p>