Re: hash function secret
| From: | debbie_dyer | Date: | Sun, 29 Sep 2002 18:58:48 +0000 |
| Subject: | Re: hash function secret | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-118113@lists.php.net to get a copy of this message | ||
I don't see how it could be randomly generated else how would you be able to
use it for authenticating etc but then I'm not a security expert. I use a
long character string known only to me and stored outside my web directory.
Maybe other ppl do differently I don't know.
----- Original Message -----
From: "Pablo Oliva" <poliva@cox.net>
To: <php-general@lists.php.net>
Sent: Sunday, September 29, 2002 7:52 PM
Subject: [PHP] hash function secret
> I was reading the sept. issue of linux magazine and they discussed
> security issues with web apps.
>
> They mentioned that to generate signatures, you should include a secret
> with your hash function:
> s = S(m) = H(secret, H(m, secret))
>
> What is the secret, just a sort of secret code that you include, like
> some sort of random password: " gr8ckret46eme " as an example ???
>