note 88034 added to function.md5
| From: | rehfeld at georg-rehfeld dot de | Date: | Wed, 07 Jan 2009 03:58:19 +0000 |
| Subject: | note 88034 added to function.md5 | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-148909@lists.php.net to get a copy of this message | ||
Before using MD5 for anything, please be aware that this hash function is cryptographically broken
and should not be used. There are alternatives such as SHA-1.
Read http://www.kb.cert.org/vuls/id/836068 and
note the following paragraph:
"Do not use the MD5 algorithm
Software developers, Certification Authorities, website owners, and users should avoid using the MD5
algorithm in any capacity. As previous research has demonstrated, it should be considered
cryptographically broken and unsuitable for further use."
---
Notes:
This message text was from someone else (???@selfhtml.org), I noted the same thing in other words
(anonymous as "deerwood").
Obviously some moderator (or may be some evil person???) removes these notes and thus refuses to
inform users of the broken MD5 algorithm, but (intentionally?) leaves in the note http://php.net/manual/function.md5.php#52500
. I consider this bad behaviour.
The flaw itself is NOT in PHP (or any OS or Browser) but in the MD5 algorithm (for sure in some
other hash algorithms too).
SHA-1 seems to be useable for some future, but was attacked in a similar way already.
BEFORE again deleting this (or a similar) message I insists of beeing informed!
Regards, Georg
----
Server IP: 217.13.201.10
Probable Submitter: 84.142.225.230
----
Manual Page -- http://www.php.net/manual/en/function.md5.php
Edit -- https://master.php.net/note/edit/88034
Del: integrated -- https://master.php.net/note/delete/88034/integrated
Del: useless -- https://master.php.net/note/delete/88034/useless
Del: bad code -- https://master.php.net/note/delete/88034/bad+code
Del: spam -- https://master.php.net/note/delete/88034/spam
Del: non-english -- https://master.php.net/note/delete/88034/non-english
Del: in docs -- https://master.php.net/note/delete/88034/in+docs
Del: other reasons-- https://master.php.net/note/delete/88034
Reject -- https://master.php.net/note/reject/88034
Search -- https://master.php.net/manage/user-notes.php