From: Ron <ronljohnsonjr@gmail.com>
To: pgsql-admin@lists.postgresql.org
Subject: Re: Password encryption
Date: Sun, 15 Apr 2018 20:16:04 -0500
Message-ID: <b2d67a07-4766-ac8c-8445-79aae8bea572@gmail.com> (raw)
In-Reply-To: <CAKUuFd5=VwmFfj4Q3HK2s9EiEycqxQ-BPCdcKniWVWn4q=d0PA@mail.gmail.com>
References: <CAKUuFd5=VwmFfj4Q3HK2s9EiEycqxQ-BPCdcKniWVWn4q=d0PA@mail.gmail.com>
On 04/15/2018 07:22 PM, Azimuddin Mohammed wrote:
> Hello,
> Is there a way I can encrypt the default password column of db user
> password. I know by default the password is encrypted as md5, can we
> encrypt that of shadow column for password?
MD5 is a *one-way hash*, not an encryption scheme. Thus, the password
cannot be reverse-computed from the MD5 hash value. So, you're (kinda)
safe, although an attacker could determine the password through brute-force
calculation of hashes.
--
Angular momentum makes the world go 'round.
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: ronljohnsonjr@gmail.com, pgsql-admin@lists.postgresql.org
Subject: Re: Password encryption
In-Reply-To: <b2d67a07-4766-ac8c-8445-79aae8bea572@gmail.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox