3 ms·
It is not so much about MD5, but more about not using a random salt for each password. Stronger hash algorithms such as SHA-1 suffer exactly the same issues wh
by vog 15y ago
It is not so much about MD5, but more about not using a random salt for each password.
Stronger hash algorithms such as SHA-1 suffer exactly the same issues when used improperly (i.e. when stored without salt, or data is exchanged without HMAC).
http://en.wikipedia.org/wiki/Salt_%28cryptography%29 http://en.wikipedia.org/wiki/Salt_%28cryptography%29
http://en.wikipedia.org/wiki/HMAC http://en.wikipedia.org/wiki/HMAC
- wlll 15y agoI'll just leave this here: http://codahale.com/how-to-safely-store-a-password/ http://codahale.com/how-to-safely-store-a-password/