note 50934 deleted from function.md5 by mazzanet

From: Date: Mon, 03 Oct 2005 09:39:40 +0000
Subject: note 50934 deleted from function.md5 by mazzanet
References: 1  Groups: php.notes 
Request: Send a blank email to php-notes+get-96265@lists.php.net to get a copy of this message
Note Submitter: ollie at bugger dot off dot spam dot bots dot com ---- Erm can someone please clarify the double encryption myth. Is is only when you double encrypt with the same function and hash key that it sometimes becomes less secure? Or is it always regardless even if you uses two different encryption methods with different hash keys? Or what about encrypting twice with the same function but using different hash keys? Some clarity on this subject would be good for php beginners like myself looking into security protocolls. for example is the following secure...? NB... uses a ctlCipherSaber class that uses md5 and base64_encode http://www.phpclasses.org/browse/package/1055.html function double_encrypt($value) { $hash = new ctlCipherSaber(); $first = $hash->encrypt($value, HASH_ACTUAL_KEY); return $hash->encrypt($first, HASH_TASK_KEY); } function double_decrypt($value) { $hash = new ctlCipherSaber(); $first = $hash->decrypt($value, HASH_TASK_KEY); return $hash->decrypt($first, HASH_ACTUAL_KEY); }

« previous php.notes (#96265) next »