note 55973 deleted from function.md5 by mazzanet
| From: | mazzanet@php.net | Date: | Mon, 03 Oct 2005 09:48:58 +0000 |
| Subject: | note 55973 deleted from function.md5 by mazzanet | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-96274@lists.php.net to get a copy of this message | ||
Note Submitter: alex at blackkettle dot org
----
Helpful Harry, and those following:
Careful. You've just traded a little security for a little obscurity. If an attacker figures
out the scheme (whether through looking at the source or otherwise), all your code does is reduce
the amount of possible passwords they've got to check in a brute force attack, because
you've given them part of the plaintext. Your scheme is almost certainly less secure than md5
alone would be. I'll admit, it's a really nice red herring, though...