#26204 [Opn->WFx]: md5 challenge
| From: | jay@php.net | Date: | Tue, 11 Nov 2003 17:50:20 +0000 |
| Subject: | #26204 [Opn->WFx]: md5 challenge | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-50232@lists.php.net to get a copy of this message | ||
ID: 26204
Updated by: jay@php.net
Reported By: hagman at hotbrev dot com
-Status: Open
+Status: Wont fix
Bug Type: Feature/Change Request
Operating System: All
PHP Version: Irrelevant
New Comment:
Is this keyed hashes we're talking about here? HMAC-type
stuff?
The mhash provides what you're looking for. There's also
an example in the manual in the comments for the mhash
function for doing keyed MD5 hashes without installing the
mhash extension.
btw, brute forcing MD5 isn't something that's particularly
easy, keyed or otherwise.
J
Previous Comments:
------------------------------------------------------------------------
[2003-11-11 10:24:28] hagman at hotbrev dot com
Description:
------------
An optional parameter for MD5(), for challenge, this makes it much
harder to bruteforce MD5 hashes. Crypt only supports (random) one-way
hashes?
Reproduce code:
---------------
The source on this has a javascript version.
http://www.zonline.jamtland.se/login
Expected result:
----------------
more secure hashes.
Actual result:
--------------
i dunno
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=26204&edit=1