From: Mark R. Dingee <mark.dingee@cox.net>
To: pgsql-sql@postgresql.org
Cc: Bruno Wolff III <bruno@wolff.to>
Subject: Re: PGSQL encryption functions
Date: Tue, 1 Nov 2005 17:00:50 -0500
Message-ID: <200511011700.50776.mark.dingee@cox.net> (raw)
In-Reply-To: <20051101212844.GA24861@wolff.to>
References: <200511011438.06610.mark.dingee@cox.net>
<20051101212844.GA24861@wolff.to>
Bruno,
I use an authenticate() function as a part of state maintenance in a PHP web
app. In the function, I generate an encrypted token that is then used in the
validation process on subsequent pages. md5 works, but I've been able to
brute-force crack it very quickly, so I'm looking for an alternative. Any
thoughts would be greatly appreciated.
Thanks,
Mark
On Tuesday 01 November 2005 04:28 pm, Bruno Wolff III wrote:
> On Tue, Nov 01, 2005 at 14:38:05 -0500,
>
> "Mark R. Dingee" <mark.dingee@cox.net> wrote:
> > Everyone,
> >
> > I'm in need of a one-way pgsql script that will take a plain-text string
> > and return an ecrypted string (preferably 32 character) . I've been
> > using md5('string'), but I'm concerned it's too weak for my needs. Does
> > anyone have any recommendations?
>
> What are your needs?
>
> ---------------------------(end of broadcast)---------------------------
> TIP 4: Have you searched our list archives?
>
> http://archives.postgresql.org
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-sql@postgresql.org
Cc: mark.dingee@cox.net, bruno@wolff.to
Subject: Re: PGSQL encryption functions
In-Reply-To: <200511011700.50776.mark.dingee@cox.net>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox