Tag Info

New answers tagged

3

You are doing it wrong, and thinking it wrong. The problem with password hashing is not, and never has been, about collisions. The main problems with password hashing are speed (hash functions are too fast) and parallelism (a hash function is always the same as itself). There is a lot of theory on password hashing. As an introduction, read this answer. The ...


2

The problem isn't your certificate, it's the certificate of googleapis.com, which you're accessing by way of loading their jQuery libraries. If you go directly to one of the scripts, you can click on the padlock icon and see more information about the SSL certificate: +- GeoTrust Global CA +--- Google Internet Authority G2 +----- *.storage.googleapis.com ...


-1

Simply storing password using sha1/md5 or any hashing function is not a good practice. Many sites are providing dictionary to crack these password. Solution is to use a powerful salt to add in password, then convert it to sha1 hash. You are using very basic or a kind of simple padding. You can use rand, time stamp, double hashing as salt. Performance wise ...


6

There are two things wrong with what you are doing with what you are doing: your algorithm in it's simple form is fast and thus not suited for password hashing. (the properties you want in a password hashing algorithm is it being fast enough to run once, but slow if you need to run it several times as well as being unfriendly when being run on FPGA/ASICs ...


15

No a salt should not be derrived from other known parameters, a salt should be globally unique. So the best you can do is to generate a really random salt for each password. Todays operating systems have a "random source", on a deterministic computer it is the best you can do to read form this random source (DEV_URANDOM). Beside this, the SHA-* hash family ...


4

A drawback of SHA1 is that it is fast, so it is easier to create rainbow tables and brute-force it. Adding a salt helps, but if the password is weak, then "number + weak password" may well be in the rainbow tables along with the password. PHP provides built-in password mechanisms. When you use these, the crypt function automatically generates a salt for you ...


15

The SHA-2 family consists of multiple closely related hash functions. It is essentially a single algorithm in which a few minor parameters are different among the variants. The initial spec only covered 224, 256, 384 and 512 bit variants. The most significant difference between the variants is that some are 32 bit variants and some are 64 bit variants. In ...


40

Just to cite wikipedia: http://en.wikipedia.org/wiki/SHA-2: The SHA-2 family consists of six hash functions with digests (hash values) that are 224, 256, 384 or 512 bits: SHA-224, SHA-256, SHA-384, SHA-512, SHA-512/224, SHA-512/256. So yes, SHA-2 is a range of hash functions and includes SHA-256.



Top 50 recent answers are included