note 50227 added to function.microtime
| From: | yonman at nsa dot co dot il | Date: | Tue, 22 Feb 2005 10:50:54 +0000 |
| Subject: | note 50227 added to function.microtime | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-85362@lists.php.net to get a copy of this message | ||
md5 time stamps can be further hardened by appending a "secret predefined key" (i.e, one
that is stored in a hardened position ... a sort of poor man's bi-directional encryption key)
after the timestamp, before passed into the md5 function.
a 40-characters long key can seriously hinder the brute force attack described above. Wouldn't
use this method for anything really important though ... unless backed up by more layers for
defense.
----
Manual Page -- http://www.php.net/manual/en/function.microtime.php
Edit -- http://master.php.net/manage/user-notes.php?action=edit+50227
Delete: added to the manual -- http://master.php.net/manage/user-notes.php?action=delete+50227&report=yes&reason=added+to+the+manual
Delete: bad code -- http://master.php.net/manage/user-notes.php?action=delete+50227&report=yes&reason=bad+code
Delete: spam -- http://master.php.net/manage/user-notes.php?action=delete+50227&report=yes&reason=spam
Delete: useless -- http://master.php.net/manage/user-notes.php?action=delete+50227&report=yes&reason=useless
Delete: other reasons -- http://master.php.net/manage/user-notes.php?action=delete+50227&report=yes
Reject -- http://master.php.net/manage/user-notes.php?action=reject+50227&report=yes
Search -- http://master.php.net/manage/user-notes.php