Received: from localhost (maia-5.hub.org [200.46.204.182]) by postgresql.org (Postfix) with ESMTP id 20FD09FB774 for ; Thu, 1 Mar 2007 07:06:29 -0400 (AST) Received: from postgresql.org ([200.46.204.71]) by localhost (mx1.hub.org [200.46.204.182]) (amavisd-new, port 10024) with ESMTP id 94138-08 for ; Thu, 1 Mar 2007 07:05:58 -0400 (AST) X-Greylist: from auto-whitelisted by SQLgrey-1.7.4 Received: from web55615.mail.re4.yahoo.com (web55615.mail.re4.yahoo.com [206.190.58.239]) by postgresql.org (Postfix) with SMTP id D67219FB718 for ; Thu, 1 Mar 2007 07:06:23 -0400 (AST) Received: (qmail 67217 invoked by uid 60001); 1 Mar 2007 11:06:22 -0000 DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com.mx; h=X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type:Message-ID; b=MRhUenOuvYL6c0BLa55FuEOkDz+PsVeeOOj0V/CCphYY8UzaxyWAv9c+fKcOMOwNtD4dNHXMJBZKEJc3/jVyIvlb4IO+tJglaFkdXTIanhrAupwPXHqdHFhzeOrcCuO9ROt2ih/58V7g/JxsmETrYvsPsjjbGdpMGHqoRnwMUg4=; X-YMail-OSG: xdz7L3YVM1ntuCGS6aumcFlMFmzagYwM_pCqPyBkBcsvn9QgsuTETg6lZ2qSdQ.IzMOxg9NcvBwxPMAm.2gIqqenNcMTrFoHCSPVAkc0IfqrBhwIl8kuS9vVzfpyyyg61_2xg.thgjwfqpg- Received: from [165.98.140.116] by web55615.mail.re4.yahoo.com via HTTP; Thu, 01 Mar 2007 03:06:22 PST X-Mailer: YahooMailRC/368.8 YahooMailWebService/0.6.132.8 Date: Thu, 1 Mar 2007 03:06:22 -0800 (PST) From: Eugenio Flores Subject: Re: How to store a password encripted in a user defined table To: Andrej Ricnik-Bay , PostgreSQL MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="0-2014517421-1172747182=:64473" Message-ID: <675205.64473.qm@web55615.mail.re4.yahoo.com> X-Virus-Scanned: Maia Mailguard 1.0.1 X-Spam-Status: No, hits=0.3 tagged_above=0 required=5 tests=AWL, BAYES_50, HTML_40_50, HTML_MESSAGE X-Spam-Level: X-Archive-Number: 200703/4 X-Sequence-Number: 27642 --0-2014517421-1172747182=:64473 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable Thanks Andrej. But how can I use such algoritms in postgresql? arey they de= fined in a function that I can call?=0A =0AOr, do I have to code one of tho= se algorithm to use it in my application?=0A=0A=0A----- Mensaje original --= --=0ADe: Andrej Ricnik-Bay =0APara: Eugenio Flores= ; PostgreSQL =0AEnvi= ado: jueves, 1 de marzo, 2007 0:21:06=0AAsunto: Re: [SQL] How to store a pa= ssword encripted in a user defined table=0A=0A=0AOn 3/1/07, Eugenio Flores = wrote:=0A> Hello, I wonder if somebody knows h= ow to store passwords in a=0A> column that is part of a user defined table.= =0AAssuming that your passwords are application specific use=0Aa sha1 or md= 5 algorithm (depending on how sensitive your data is)=0Aand store that in a= varchar or char field. When the user authenticates=0Athe password gets ha= shed in the app and compared against the=0Astored hash.=0A=0A=0ACheers,=0AA= ndrej=0A=0A---------------------------(end of broadcast)-------------------= --------=0ATIP 9: In versions below 8.0, the planner will ignore your desir= e to=0A choose an index scan if your joining column's datatypes do no= t=0A match=0A=0A=0A=09=0A=09=0A=09=09=0A_____________________________= ______________________________ =0ADo You Yahoo!? =0ALa mejor conexi=F3n a I= nternet y 2GB extra a tu correo por $100 al mes. http://net.yahoo.c= om.mx =0A --0-2014517421-1172747182=:64473 Content-Type: text/html; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable
=0A
Thanks Andrej. But how can I use suc= h algoritms in postgresql? arey they defined in a function that I can call?=
=0A
 
=0A
Or, do I have to code one of th= ose algorithm to use it in my application?

=0A
----- = Mensaje original ----
De: Andrej Ricnik-Bay <andrej.groups@gmail.com&= gt;
Para: Eugenio Flores <eflores767003@yahoo.com.mx>; PostgreSQL = <pgsql-sql@postgresql.org>
Enviado: jueves, 1 de marzo, 2007 0:21:= 06
Asunto: Re: [SQL] How to store a password encripted in a user defined= table

=0A
On 3/1/07, Eugenio Flores <eflores767003@yahoo.com= .mx> wrote:
> Hello, I wonder if somebody knows how to store passw= ords in a
> column that is part of a user defined table.
Assuming = that your passwords are application specific use
a sha1 or md5 algorithm= (depending on how sensitive your data is)
and store that in a varchar o= r char field.  When the user authenticates
the password gets h= ashed in the app and compared against the
stored hash.


Cheers= ,
Andrej

---------------------------(end of broadcast)-----------= ----------------
TIP 9: In versions below 8.0, the planner will ignore y= our desire to
       choose an index scan = if your joining column's datatypes do not
     =   match


=0A=09=09
=0ADo Y= ou Yahoo!? =0ALa mejor conexi=F3n a Internet y 2GB extra a tu correo= por $100 al mes. http://net.yahoo.com.= mx =0A --0-2014517421-1172747182=:64473--