From: Chad Wagner <chad.wagner@gmail.com>
To: Ezequias Rodrigues da Rocha <ezequias.rocha@gmail.com>
Cc: PostgreSQL <pgsql-sql@postgresql.org>
Subject: Re: SHA-1 vs MD5
Date: Thu, 8 Mar 2007 09:52:29 -0500
Message-ID: <81961ff50703080652o41274e2djc5b789fb4da9bd27@mail.gmail.com> (raw)
In-Reply-To: <55c095e90703080339y67152f49ud82741fd21ac6370@mail.gmail.com>
References: <55c095e90703071204t5aebb921s9d5f1067d3c2f035@mail.gmail.com>
<81961ff50703071344i28d9ea6cr4902fed404b38602@mail.gmail.com>
<55c095e90703080339y67152f49ud82741fd21ac6370@mail.gmail.com>
On 3/8/07, Ezequias Rodrigues da Rocha <ezequias.rocha@gmail.com> wrote:
>
> I really don't have the pgcrypto. It could be a nice alternative. Could
> you tell me the steps to install it ?
This should help you out:
http://www.postgresql.org/docs/8.2/static/external-extensions.htmlhttp://developer.postgresql.org/cvsweb.cgi/pgsql/contrib/README?rev=1.91;content-type=text%2Fplain
I am very concerned about security in my application becouse we are going to
> moviment a large ammount of information and money. As much i take care of it
> as good.
SHA1 and MD5 are hashing algorithms, they are typically used for passwords
and in conjunction with public key encryption or over-the-wire encryption to
sign the message. If you are really concerned about security, you may want
to hire an experienced person in the security engineering field. Especially
if you are talking about financial information.
I know some problem of MD5 and know it is very good too. If someone could
> tell me where MD5 is used I could be more relaxed.
The impression I get is that SHA-256, SHA-384, or SHA-512 are the preferred
hashing algorithms, but I really don't keep up on it. Many many password
systems use MD5, I think it is reasonably safe.
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-sql@postgresql.org
Cc: chad.wagner@gmail.com, ezequias.rocha@gmail.com
Subject: Re: SHA-1 vs MD5
In-Reply-To: <81961ff50703080652o41274e2djc5b789fb4da9bd27@mail.gmail.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox