note 81084 added to function.mt-rand
| From: | WilliamLeslie at osu1 dot php dot net | Date: | Wed, 13 Feb 2008 17:24:15 +0000 |
| Subject: | note 81084 added to function.mt-rand | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-136120@lists.php.net to get a copy of this message | ||
Do not rely on the strength of any 'home-brewed' cryptographic algorithm, such as the one
posted by dmoree at coker dot edu. Algorithms such as MD5 and SHA-1 have been the subject of
intense academic research and have known security properties.
While it is true that MD5 and SHA-1 are generally no longer recommended for use in new
cryptosystems, there are newer algorithms such as SHA-256 that address the older algorithms'
weaknesses. These newer algorithms have not received quite as much scrutiny as their older
counterparts, but have still been studied much more carefully than your home-brewed algorithm, most
likely.
Dmoree at coker dot edu's concern about rainbow tables is best addressed by a properly applied
salting technique. Every bit of 'salt' added to a cryptographic hash effectively extends
the complexity of the password and thus the size of the rainbow table needed to crack it.
Furthermore, wisely chosen password strength policies can mitigate such attacks.
----
Server IP: 208.69.120.35
Probable Submitter: 128.83.87.20
----
Manual Page -- http://www.php.net/manual/en/function.mt-rand.php
Edit -- https://master.php.net/note/edit/81084
Del: integrated -- https://master.php.net/note/delete/81084/integrated
Del: useless -- https://master.php.net/note/delete/81084/useless
Del: bad code -- https://master.php.net/note/delete/81084/bad+code
Del: spam -- https://master.php.net/note/delete/81084/spam
Del: non-english -- https://master.php.net/note/delete/81084/non-english
Del: in docs -- https://master.php.net/note/delete/81084/in+docs
Del: other reasons-- https://master.php.net/note/delete/81084
Reject -- https://master.php.net/note/reject/81084
Search -- https://master.php.net/manage/user-notes.php