note 88021 deleted from function.md5 by danbrown
| From: | danbrown@php.net | Date: | Tue, 06 Jan 2009 19:08:16 +0000 |
| Subject: | note 88021 deleted from function.md5 by danbrown | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-148896@lists.php.net to get a copy of this message | ||
Note Submitter: svenr at selfhtml dot org
----
Before using MD5 for anything, please be aware that this hash function is cryptographically broken
and should not be used. There are alternatives such as SHA-1.
Read http://www.kb.cert.org/vuls/id/836068 and
note the following paragraph:
"Do not use the MD5 algorithm
Software developers, Certification Authorities, website owners, and users should avoid using the MD5
algorithm in any capacity. As previous research has demonstrated, it should be considered
cryptographically broken and unsuitable for further use."