note 55973 deleted from function.md5 by mazzanet

From: Date: Mon, 03 Oct 2005 09:48:58 +0000
Subject: note 55973 deleted from function.md5 by mazzanet
References: 1  Groups: php.notes 
Request: Send a blank email to php-notes+get-96274@lists.php.net to get a copy of this message
Note Submitter: alex at blackkettle dot org ---- Helpful Harry, and those following: Careful. You've just traded a little security for a little obscurity. If an attacker figures out the scheme (whether through looking at the source or otherwise), all your code does is reduce the amount of possible passwords they've got to check in a brute force attack, because you've given them part of the plaintext. Your scheme is almost certainly less secure than md5 alone would be. I'll admit, it's a really nice red herring, though...

« previous php.notes (#96274) next »