From: Ezequias Rodrigues da Rocha <ezequias.rocha@gmail.com>
To: Chad Wagner <chad.wagner@gmail.com>
Cc: PostgreSQL <pgsql-sql@postgresql.org>
Subject: Re: SHA-1 vs MD5
Date: Fri, 9 Mar 2007 09:34:59 -0300
Message-ID: <55c095e90703090434ob874f2q4ff3cfd0d91c88f3@mail.gmail.com> (raw)
In-Reply-To: <81961ff50703080652o41274e2djc5b789fb4da9bd27@mail.gmail.com>
References: <55c095e90703071204t5aebb921s9d5f1067d3c2f035@mail.gmail.com>
<81961ff50703071344i28d9ea6cr4902fed404b38602@mail.gmail.com>
<55c095e90703080339y67152f49ud82741fd21ac6370@mail.gmail.com>
<81961ff50703080652o41274e2djc5b789fb4da9bd27@mail.gmail.com>
Thank you so much for your information. I installed the pgCrypto. Now I have
more than 40 functions (i believe all are from pgcrypto) but when I try to
run your query:
select encode(digest('blahblah', 'sha256'), 'hex');
I got the error:
ERROR: Cannot use "sha256": No such hash algorithm
SQL state: 22023
Any suggestion
Ezequias
2007/3/8, Chad Wagner <chad.wagner@gmail.com>:
>
> On 3/8/07, Ezequias Rodrigues da Rocha <ezequias.rocha@gmail.com> wrote:
> >
> > I really don't have the pgcrypto. It could be a nice alternative. Could
> > you tell me the steps to install it ?
>
>
> This should help you out:
>
> http://www.postgresql.org/docs/8.2/static/external-extensions.html
> http://developer.postgresql.org/cvsweb.cgi/pgsql/contrib/README?rev=1.91;content-type=text%2Fplain
>
>
>
>
> I am very concerned about security in my application becouse we are going
> > to moviment a large ammount of information and money. As much i take care of
> > it as good.
>
>
> SHA1 and MD5 are hashing algorithms, they are typically used for passwords
> and in conjunction with public key encryption or over-the-wire encryption to
> sign the message. If you are really concerned about security, you may want
> to hire an experienced person in the security engineering field. Especially
> if you are talking about financial information.
>
>
> I know some problem of MD5 and know it is very good too. If someone could
> > tell me where MD5 is used I could be more relaxed.
>
>
>
> The impression I get is that SHA-256, SHA-384, or SHA-512 are the
> preferred hashing algorithms, but I really don't keep up on it. Many many
> password systems use MD5, I think it is reasonably safe.
>
--
Ezequias Rodrigues da Rocha
http://ezequiasrocha.blogspot.com/
use Mozilla Firefox:http://br.mozdev.org/firefox/
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-sql@postgresql.org
Cc: ezequias.rocha@gmail.com, chad.wagner@gmail.com
Subject: Re: SHA-1 vs MD5
In-Reply-To: <55c095e90703090434ob874f2q4ff3cfd0d91c88f3@mail.gmail.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox