X-Original-To: pgsql-sql-postgresql.org@localhost.postgresql.org Received: from localhost (unknown [200.46.204.2]) by svr1.postgresql.org (Postfix) with ESMTP id 1419CD1D8B7 for ; Fri, 9 Apr 2004 22:06:48 -0300 (ADT) Received: from svr1.postgresql.org ([200.46.204.71]) by localhost (neptune.hub.org [200.46.204.2]) (amavisd-new, port 10024) with ESMTP id 13170-07 for ; Fri, 9 Apr 2004 22:06:50 -0300 (ADT) Received: from candle.pha.pa.us (candle.pha.pa.us [207.106.42.251]) by svr1.postgresql.org (Postfix) with ESMTP id 1D758D1D887 for ; Fri, 9 Apr 2004 22:06:45 -0300 (ADT) Received: (from pgman@localhost) by candle.pha.pa.us (8.11.6/8.11.6) id i3A16mo12268; Fri, 9 Apr 2004 21:06:48 -0400 (EDT) From: Bruce Momjian Message-Id: <200404100106.i3A16mo12268@candle.pha.pa.us> Subject: Re: Crypt() encryption In-Reply-To: <200404071101.AA230686984@mail.theinformationforge.com> To: czhang@theinformationforge.com Date: Fri, 9 Apr 2004 21:06:48 -0400 (EDT) Cc: pgsql-sql@postgresql.org X-Mailer: ELM [version 2.4ME+ PL108 (25)] MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=US-ASCII X-Virus-Scanned: by amavisd-new at postgresql.org X-Archive-Number: 200404/85 X-Sequence-Number: 17460 Christina Zhang wrote: > Hello, > > We are planning to use Crypt() to encrypt the application level > users' passwords. Our question is that which encryption method > the Crypt() is using? (DES, or some other encryption algorithms?) > Because we concern about the strenth of the Crypt(). Use MD5. That is the best method for this. There is an md5() function already in the database, and there is /contrib/pgcrypto. -- Bruce Momjian | http://candle.pha.pa.us pgman@candle.pha.pa.us | (610) 359-1001 + If your life is a hard drive, | 13 Roberts Road + Christ can be your backup. | Newtown Square, Pennsylvania 19073