Received: from localhost (maia-4.hub.org [200.46.204.183])
	by postgresql.org (Postfix) with ESMTP id CB8169FBA9B
	for <pgsql-sql-postgresql.org@postgresql.org>;
	Thu,  8 Mar 2007 10:52:34 -0400 (AST)
Received: from postgresql.org ([200.46.204.71])
	by localhost (mx1.hub.org [200.46.204.183]) (amavisd-new, port 10024)
	with ESMTP id 78006-08 for <pgsql-sql-postgresql.org@postgresql.org>;
	Thu,  8 Mar 2007 10:52:33 -0400 (AST)
X-Greylist: domain auto-whitelisted by SQLgrey-1.7.4
Received: from nz-out-0506.google.com (nz-out-0506.google.com
 [64.233.162.234])
	by postgresql.org (Postfix) with ESMTP id 4B4E39FBA71
	for <pgsql-sql@postgresql.org>; Thu,  8 Mar 2007 10:52:31 -0400 (AST)
Received: by nz-out-0506.google.com with SMTP id r28so405755nza
	for <pgsql-sql@postgresql.org>; Thu, 08 Mar 2007 06:52:30 -0800 (PST)
DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta;
	h=domainkey-signature:received:received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:references;
	b=Mu63O07Aj6eoBC/CRXAomJJH5Qu7cAkADvhClViCEmTbNHjlOu9DqqCMZ64d+sa9gAqF9WRaK02ES1/ge2x/VlsegSNRkqNwtFO4wahe74mCvj5DnV1rPjbWXqeMGMQsys5wRVqHRGu5+Q2SkIhKg1WxIvTF5M3EUa4Ry6F6unY=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta;
	h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:references;
	b=JYSiExeHN5AkSaNHrrIe8t9CqQazevI4tXnpocUYF24CaHH6GrbDY1E4Zdlm+w0Fy2b2cmWmPWyTnOov8NVSaN7B0l94qD9GSjykvgLQFV+3WEmTlRk/B1ZsJRcQiLYPMXEYcFt6WoRS2uvenXdrWd94a/7xHxhzECoQHfWiqIM=
Received: by 10.65.224.11 with SMTP id b11mr896992qbr.1173365550230;
	Thu, 08 Mar 2007 06:52:30 -0800 (PST)
Received: by 10.49.75.11 with HTTP; Thu, 8 Mar 2007 06:52:29 -0800 (PST)
Message-ID: <81961ff50703080652o41274e2djc5b789fb4da9bd27@mail.gmail.com>
Date: Thu, 8 Mar 2007 09:52:29 -0500
From: "Chad Wagner" <chad.wagner@gmail.com>
To: "Ezequias Rodrigues da Rocha" <ezequias.rocha@gmail.com>
Subject: Re: SHA-1 vs MD5
Cc: PostgreSQL <pgsql-sql@postgresql.org>
In-Reply-To: <55c095e90703080339y67152f49ud82741fd21ac6370@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_Part_169271_16189031.1173365549996"
References: <55c095e90703071204t5aebb921s9d5f1067d3c2f035@mail.gmail.com>
	<81961ff50703071344i28d9ea6cr4902fed404b38602@mail.gmail.com>
	<55c095e90703080339y67152f49ud82741fd21ac6370@mail.gmail.com>
X-Virus-Scanned: Maia Mailguard 1.0.1
X-Archive-Number: 200703/81
X-Sequence-Number: 27719

------=_Part_169271_16189031.1173365549996
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

On 3/8/07, Ezequias Rodrigues da Rocha <ezequias.rocha@gmail.com> wrote:
>
> I really don't have the pgcrypto. It could be a nice alternative. Could
> you tell me the steps to install it ?


This should help you out:

http://www.postgresql.org/docs/8.2/static/external-extensions.html
http://developer.postgresql.org/cvsweb.cgi/pgsql/contrib/README?rev=1.91;content-type=text%2Fplain



I am very concerned about security in my application becouse we are going to
> moviment a large ammount of information and money. As much i take care of it
> as good.


SHA1 and MD5 are hashing algorithms, they are typically used for passwords
and in conjunction with public key encryption or over-the-wire encryption to
sign the message.  If you are really concerned about security, you may want
to hire an experienced person in the security engineering field.  Especially
if you are talking about financial information.


I know some problem of MD5 and know it is very good too. If someone could
> tell me where MD5 is used I could be more relaxed.



The impression I get is that SHA-256, SHA-384, or SHA-512 are the preferred
hashing algorithms, but I really don't keep up on it.  Many many password
systems use MD5, I think it is reasonably safe.

------=_Part_169271_16189031.1173365549996
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

<div><span class="gmail_quote">On 3/8/07, <b class="gmail_sendername">Ezequias Rodrigues da Rocha</b> &lt;<a href="mailto:ezequias.rocha@gmail.com">ezequias.rocha@gmail.com</a>&gt; wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
I really don&#39;t have the pgcrypto. It could be a nice alternative. Could you tell me the steps to install it ?</blockquote><div><br>This should help you out:<br><br><a href="http://www.postgresql.org/docs/8.2/static/external-extensions.html">
http://www.postgresql.org/docs/8.2/static/external-extensions.html</a><br><a href="http://developer.postgresql.org/cvsweb.cgi/pgsql/contrib/README?rev=1.91;content-type=text%2Fplain">http://developer.postgresql.org/cvsweb.cgi/pgsql/contrib/README?rev=1.91;content-type=text%2Fplain
</a><br><br>&nbsp;</div><br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">I am very concerned about security in my application becouse we are going to moviment a large ammount of information and money. As much i take care of it as good.
</blockquote><div><br>SHA1 and MD5 are hashing algorithms, they are typically used for passwords and in conjunction with public key encryption or over-the-wire encryption to sign the message.&nbsp; If you are really concerned about security, you may want to hire an experienced person in the security engineering field.&nbsp; Especially if you are talking about financial information.
<br>&nbsp;</div><br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">I know some problem of MD5 and know it is very good too. If someone could tell me where MD5 is used I could be more relaxed.
</blockquote><div><br><br>The impression I get is that SHA-256, SHA-384, or SHA-512 are the preferred hashing algorithms, but I really don&#39;t keep up on it.&nbsp; Many many password systems use MD5, I think it is reasonably safe.
<br></div></div>

------=_Part_169271_16189031.1173365549996--