note 50227 deleted from function.microtime by tularis
| From: | tularis@php.net | Date: | Sun, 22 Jun 2008 12:16:18 +0000 |
| Subject: | note 50227 deleted from function.microtime by tularis | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-140710@lists.php.net to get a copy of this message | ||
Note Submitter: yonman at nsa dot co dot il
----
md5 time stamps can be further hardened by appending a "secret predefined key" (i.e, one
that is stored in a hardened position ... a sort of poor man's bi-directional encryption key)
after the timestamp, before passed into the md5 function.
a 40-characters long key can seriously hinder the brute force attack described above. Wouldn't
use this method for anything really important though ... unless backed up by more layers for
defense.