On Wed, Mar 16, 2005 at 08:19:32AM -0700, Mark Gardner wrote: > Does this mean that anything that uses MD5 as a hash alorithm is > vunerable. So I if i have a website that md5 encrypts passwords to > store in a database, does that mean that I should use something > else? If so what is a good option.
MD5 is perfectly fine for that usage. And it's not technically
``encryption''; it's hashing.
Mike
.___________________________________________________________________.
Michael A. Halcrow
Security Software Engineer, IBM Linux Technology Center
GnuPG Fingerprint: 05B5 08A8 713A 64C1 D35D 2371 2D3C FDDA 3EB6 601D
If this is flashing then you're a winner!
signature.asc
Description: Digital signature
-------------------- BYU Unix Users Group http://uug.byu.edu/ The opinions expressed in this message are the responsibility of their author. They are not endorsed by BYU, the BYU CS Department or BYU-UUG. ___________________________________________________________________ List Info: http://uug.byu.edu/cgi-bin/mailman/listinfo/uug-list
