Spring Bcrypt is stateless and doesn't need a secure random?
<p>I have <strong>two doubts</strong> about Spring Security BCrypt:</p>

<ol>
<li>Does Bcrypt need a strenght and secure random to be safe?</li>
<li>What best data type to persist in MySQL (BINARY vs CHAR)?</li>
</ol>

<hr>

<p>About first doubt, I read many tutorials and I found always the same configuration (default)</p>

<pre><code>@Bean
public BCryptPasswordEncoder passwordEncoder() {
    return new BCryptPasswordEncoder();
}
</code></pre>

<p>So, can I consider this configuration stateless? Doesn't need to use a strenght and secure random for my web service generates differents hashes from the default configuration?</p>

<hr>

<p>And about second doubt, has Bcrypt hash lenght always 60? So, is better to use CHAR(60) or BINARY(60) in my database?</p>