Received: from localhost (maia-3.hub.org [200.46.204.184]) by postgresql.org (Postfix) with ESMTP id 253F09FB618 for ; Tue, 5 Jun 2007 12:09:53 -0300 (ADT) Received: from postgresql.org ([200.46.204.71]) by localhost (mx1.hub.org [200.46.204.184]) (amavisd-maia, port 10024) with ESMTP id 33280-05 for ; Tue, 5 Jun 2007 12:09:44 -0300 (ADT) X-Greylist: domain auto-whitelisted by SQLgrey-1.7.5 Received: from nz-out-0506.google.com (nz-out-0506.google.com [64.233.162.224]) by postgresql.org (Postfix) with ESMTP id 40C029FB336 for ; Tue, 5 Jun 2007 12:09:44 -0300 (ADT) Received: by nz-out-0506.google.com with SMTP id m22so1189984nzf for ; Tue, 05 Jun 2007 08:09:43 -0700 (PDT) DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=rra9l6Ugu/bZ+IiEizJn/ZDECxUt5URb1SAM/hPyO8DIFmcGzLyJO2VKn3KhbZ2Gebm1ghyHOdGFz2PBTEVcqZxIeYIbFbSK5TKZ2hR1WtP7uJnx+RIEi0cweSzu/NIbabiQOgNCbXDRt7HPk6Yo8WGvIkz26oyynyn+l0ZR2rI= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=kPn1Kx8RgDofhThFi4uZ+zvw9meRjaMUsEkyyJKblO8+s9bN7lRc0XmCWery4yv808ChA3Ss5KJDW/JQsvwK1RKMji7Wnl3oFmj5ffzDZQRSXTBtrvNSrwDWJ4p9EgweXk/2xyHIUkSnNhc3ma2zAVTKGxvD+cRNZ5NaxZv4h1U= Received: by 10.114.134.1 with SMTP id h1mr6106099wad.1181056183051; Tue, 05 Jun 2007 08:09:43 -0700 (PDT) Received: by 10.114.255.5 with HTTP; Tue, 5 Jun 2007 08:09:43 -0700 (PDT) Message-ID: Date: Tue, 5 Jun 2007 18:09:43 +0300 From: "Marko Kreen" To: "Brian Mathis" Subject: Re: Encrypted column Cc: "Tino Wildenhain" , "Ranieri Mazili" , pgsql-general@postgresql.org, pgsql-sql@postgresql.org In-Reply-To: MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <46645B01.6070605@terra.com.br> <4665161F.9090009@wildenhain.de> <183c528b0706050726v3214820fx6669d1e99bcfaaa@mail.gmail.com> X-Virus-Scanned: Maia Mailguard 1.0.1 X-Archive-Number: 200706/406 X-Sequence-Number: 115229 On 6/5/07, Marko Kreen wrote: > both md5 and sha1 are actually easier to bruteforce than > the old DES-based crypt. If this statement seems weird - the problem is the speed. MD5 and SHA1 are just faster algorithms than des-crypt. And there's nothing wrong with fast general-purpose algorithms, as long their cryptographic properties hold. Starting from 20-30 bytes the bruteforce is really not an option. But if you have under 10 bytes (let be honest - you have 6 bytes...) the speed start to matter, because it is possible on random laptop to simply try all combinations. -- marko