Received: from localhost (maia-2.hub.org [200.46.204.187]) by postgresql.org (Postfix) with ESMTP id DBC8D9FB6F3 for ; Thu, 8 Mar 2007 07:39:31 -0400 (AST) Received: from postgresql.org ([200.46.204.71]) by localhost (mx1.hub.org [200.46.204.187]) (amavisd-new, port 10024) with ESMTP id 78780-08 for ; Thu, 8 Mar 2007 07:39:23 -0400 (AST) X-Greylist: domain auto-whitelisted by SQLgrey-1.7.4 Received: from ug-out-1314.google.com (ug-out-1314.google.com [66.249.92.169]) by postgresql.org (Postfix) with ESMTP id D7F5D9FB43D for ; Thu, 8 Mar 2007 07:39:27 -0400 (AST) Received: by ug-out-1314.google.com with SMTP id k3so862723ugf for ; Thu, 08 Mar 2007 03:39:26 -0800 (PST) DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:references; b=P9HE9069sP3PyFi+uwBxSDKS0gk2o2jouG+PiJzS2bxUlzqg+4ZAB+Twn9mIZch8bihvoZDGOQr2QfPEJ//Wh8Jzn+J5+bfbmaeGTsJzDm7kQCXo5kcOePSZHUZupQCAt4KMH4pJQDDxHM/JR5vij9Wj4TCdRosMxATYtyC1+Ag= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:references; b=hjvEWmt+X2L8Fs3+/IcpFMbf39//LgQlvMYHLyXPw8CJ6gVOY1NLQu93owGq3nWdubxvSXoz04Rvp8QUTol+XRQsi+c+7o71BiC6+MTf/+dFh0OpVdJSNkCFiIqqtUSHWncbSROSr6n+pqEpmojMvZgvOwFGobnLjdp2E8MrRy4= Received: by 10.67.97.7 with SMTP id z7mr6720007ugl.1173353966346; Thu, 08 Mar 2007 03:39:26 -0800 (PST) Received: by 10.67.94.13 with HTTP; Thu, 8 Mar 2007 03:39:26 -0800 (PST) Message-ID: <55c095e90703080339y67152f49ud82741fd21ac6370@mail.gmail.com> Date: Thu, 8 Mar 2007 08:39:26 -0300 From: "Ezequias Rodrigues da Rocha" To: "Chad Wagner" Subject: Re: SHA-1 vs MD5 Cc: PostgreSQL In-Reply-To: <81961ff50703071344i28d9ea6cr4902fed404b38602@mail.gmail.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_Part_104756_26917448.1173353966069" References: <55c095e90703071204t5aebb921s9d5f1067d3c2f035@mail.gmail.com> <81961ff50703071344i28d9ea6cr4902fed404b38602@mail.gmail.com> X-Virus-Scanned: Maia Mailguard 1.0.1 X-Archive-Number: 200703/80 X-Sequence-Number: 27718 ------=_Part_104756_26917448.1173353966069 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline I really don't have the pgcrypto. It could be a nice alternative. Could you tell me the steps to install it ? I am very concerned about security in my application becouse we are going to moviment a large ammount of information and money. As much i take care of it as good. I know some problem of MD5 and know it is very good too. If someone could tell me where MD5 is used I could be more relaxed. My best regards to all -- Ezequias Rodrigues da Rocha http://ezequiasrocha.blogspot.com/ use Mozilla Firefox:http://br.mozdev.org/firefox/ 2007/3/7, Chad Wagner : > > On 3/7/07, Ezequias Rodrigues da Rocha wrote: > > > > I know that there is a md5 internal function on postgresql, but I > > noticed that it isn't the more secure today. I would like to know if there > > is a SHA-1 function implemented yet of, if not, if the team has plan to > > introduce it on PostgreSQL. > > > You are probably looking for the pgcrypto contribution, look in the > contrib directory for it. > > test=# select encode(digest('blahblah', 'sha256'), 'hex'); > encode > ------------------------------------------------------------------ > 40b1bbb5445fc021a312315379f4633284851e14d1db83fb0730f58872d6033b > (1 row) > > > > > -- > Chad > http://www.postgresqlforums.com/ ------=_Part_104756_26917448.1173353966069 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline I really don't have the pgcrypto. It could be a nice alternative. Could you tell me the steps to install it ?

I am very concerned about security in my application becouse we are going to moviment a large ammount of information and money. As much i take care of it as good.

I know some problem of MD5 and know it is very good too. If someone could tell me where MD5 is used I could be more relaxed.

My best regards to all


--
Ezequias Rodrigues da Rocha
http://ezequiasrocha.blogspot.com/
use Mozilla Firefox:http://br.mozdev.org/firefox/

2007/3/7, Chad Wagner <chad.wagner@gmail.com>:
On 3/7/07, Ezequias Rodrigues da Rocha <ezequias.rocha@gmail.com > wrote:
I know that there is a md5 internal function on postgresql, but I noticed that it isn't the more secure today. I would like to know if there is a SHA-1 function implemented yet of, if not, if the team has plan to introduce it on PostgreSQL.

You are probably looking for the pgcrypto contribution, look in the contrib directory for it.

test=# select encode(digest('blahblah', 'sha256'), 'hex');
                              encode                             
------------------------------------------------------------------
 40b1bbb5445fc021a312315379f4633284851e14d1db83fb0730f58872d6033b
(1 row)




--
Chad
http://www.postgresqlforums.com/



------=_Part_104756_26917448.1173353966069--