note 50227 deleted from function.microtime by tularis

From: Date: Sun, 22 Jun 2008 12:16:18 +0000
Subject: note 50227 deleted from function.microtime by tularis
References: 1  Groups: php.notes 
Request: Send a blank email to php-notes+get-140710@lists.php.net to get a copy of this message
Note Submitter: yonman at nsa dot co dot il ---- md5 time stamps can be further hardened by appending a "secret predefined key" (i.e, one that is stored in a hardened position ... a sort of poor man's bi-directional encryption key) after the timestamp, before passed into the md5 function. a 40-characters long key can seriously hinder the brute force attack described above. Wouldn't use this method for anything really important though ... unless backed up by more layers for defense.

« previous php.notes (#140710) next »