note 81084 added to function.mt-rand

From: Date: Wed, 13 Feb 2008 17:24:15 +0000
Subject: note 81084 added to function.mt-rand
Groups: php.notes 
Request: Send a blank email to php-notes+get-136120@lists.php.net to get a copy of this message
Do not rely on the strength of any 'home-brewed' cryptographic algorithm, such as the one posted by dmoree at coker dot edu. Algorithms such as MD5 and SHA-1 have been the subject of intense academic research and have known security properties. While it is true that MD5 and SHA-1 are generally no longer recommended for use in new cryptosystems, there are newer algorithms such as SHA-256 that address the older algorithms' weaknesses. These newer algorithms have not received quite as much scrutiny as their older counterparts, but have still been studied much more carefully than your home-brewed algorithm, most likely. Dmoree at coker dot edu's concern about rainbow tables is best addressed by a properly applied salting technique. Every bit of 'salt' added to a cryptographic hash effectively extends the complexity of the password and thus the size of the rainbow table needed to crack it. Furthermore, wisely chosen password strength policies can mitigate such attacks. ---- Server IP: 208.69.120.35 Probable Submitter: 128.83.87.20 ---- Manual Page -- http://www.php.net/manual/en/function.mt-rand.php Edit -- https://master.php.net/note/edit/81084 Del: integrated -- https://master.php.net/note/delete/81084/integrated Del: useless -- https://master.php.net/note/delete/81084/useless Del: bad code -- https://master.php.net/note/delete/81084/bad+code Del: spam -- https://master.php.net/note/delete/81084/spam Del: non-english -- https://master.php.net/note/delete/81084/non-english Del: in docs -- https://master.php.net/note/delete/81084/in+docs Del: other reasons-- https://master.php.net/note/delete/81084 Reject -- https://master.php.net/note/reject/81084 Search -- https://master.php.net/manage/user-notes.php

« previous php.notes (#136120) next »