From: Mario Splivalo <mario.splivalo@mobart.hr>
To: pgsql-sql@postgresql.org
Subject: Re: PGSQL encryption functions
Date: Wed, 02 Nov 2005 10:26:27 +0100
Message-ID: <1130923587.7739.11.camel@ekim> (raw)
In-Reply-To: <28738.1130883210@sss.pgh.pa.us>
References: <200511011438.06610.mark.dingee@cox.net>
<20051101212844.GA24861@wolff.to>
<200511011700.50776.mark.dingee@cox.net>
<28738.1130883210@sss.pgh.pa.us>
On Tue, 2005-11-01 at 17:13 -0500, Tom Lane wrote:
> "Mark R. Dingee" <mark.dingee@cox.net> writes:
> > md5 works, but I've been able to
> > brute-force crack it very quickly,
>
> Really? Where's your publication of this remarkable breakthrough?
I'd say you can't bruteforce md5, unless you're extremley lucky.
However, md5 is easily broken, you just need to know how to construct
the hashes.
One could switch to SHA for 'increaased' security.
Although I don't think he'd be having problems using MD5 as he described
it. I'd also lilke to see he's example of brute-force 'cracking' the MD5
digest.
Mike
--
Mario Splivalo
Mob-Art
mario.splivalo@mobart.hr
"I can do it quick, I can do it cheap, I can do it well. Pick any two."
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-sql@postgresql.org
Cc: mario.splivalo@mobart.hr
Subject: Re: PGSQL encryption functions
In-Reply-To: <1130923587.7739.11.camel@ekim>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox