note 88034 added to function.md5

From: Date: Wed, 07 Jan 2009 03:58:19 +0000
Subject: note 88034 added to function.md5
Groups: php.notes 
Request: Send a blank email to php-notes+get-148909@lists.php.net to get a copy of this message
Before using MD5 for anything, please be aware that this hash function is cryptographically broken and should not be used. There are alternatives such as SHA-1. Read http://www.kb.cert.org/vuls/id/836068 and note the following paragraph: "Do not use the MD5 algorithm Software developers, Certification Authorities, website owners, and users should avoid using the MD5 algorithm in any capacity. As previous research has demonstrated, it should be considered cryptographically broken and unsuitable for further use." --- Notes: This message text was from someone else (???@selfhtml.org), I noted the same thing in other words (anonymous as "deerwood"). Obviously some moderator (or may be some evil person???) removes these notes and thus refuses to inform users of the broken MD5 algorithm, but (intentionally?) leaves in the note http://php.net/manual/function.md5.php#52500 . I consider this bad behaviour. The flaw itself is NOT in PHP (or any OS or Browser) but in the MD5 algorithm (for sure in some other hash algorithms too). SHA-1 seems to be useable for some future, but was attacked in a similar way already. BEFORE again deleting this (or a similar) message I insists of beeing informed! Regards, Georg ---- Server IP: 217.13.201.10 Probable Submitter: 84.142.225.230 ---- Manual Page -- http://www.php.net/manual/en/function.md5.php Edit -- https://master.php.net/note/edit/88034 Del: integrated -- https://master.php.net/note/delete/88034/integrated Del: useless -- https://master.php.net/note/delete/88034/useless Del: bad code -- https://master.php.net/note/delete/88034/bad+code Del: spam -- https://master.php.net/note/delete/88034/spam Del: non-english -- https://master.php.net/note/delete/88034/non-english Del: in docs -- https://master.php.net/note/delete/88034/in+docs Del: other reasons-- https://master.php.net/note/delete/88034 Reject -- https://master.php.net/note/reject/88034 Search -- https://master.php.net/manage/user-notes.php

« previous php.notes (#148909) next »