--- a/handouts/ho01.tex Thu Sep 25 00:24:41 2014 +0100
+++ b/handouts/ho01.tex Thu Sep 25 00:28:53 2014 +0100
@@ -309,11 +309,16 @@
There is one ingredient missing, which happens to be called
\emph{salt}. The salt is a random key, which is added to the
-counter before the hash is calculated. In our case we need
-to keep the salt secrete.
+counter before the hash is calculated. In our case we need to
+keep the salt secret. As can be see from
+Figure~\ref{hashsalt},
+we now need to extract the cookie data (Line 20). When we
+set the new increased cookie, we will add the salt before
+hashing (this is done in Line 13).
\begin{figure}[p]
\lstinputlisting{../progs/App3.js}
+\caption{\label{hashsalt}}
\end{figure}