User authentication query

[eluser]n0xie[/eluser]

Or are we merely relying on the fact that it would take a pretty long tie to generate a dictionary for a brute force attack?

Exactly. If you salt each row/password individually, it means the dictionary has to be recreated for each user in your dataset.

See also this link