great to hear that MD5 will be dumped. The soft migration sounds good and salting sounds good too.
But why not using a Hash-algorithm from the SHA-2 family (SHA512 etc.) now? It's what the NIST currently recommends (at least until the next generation hash is found). Performance should'nt be an issue here because the value would be calculated infrequently.
I agree. If you're going to change, you might want to skip what's already considered unsecure. See http://www.schneier.com/blog/archives/2005/02/sha1_broken.html
Anonym am um :
read your link and try to understand...
when salted, md5 and sha1 are both secure if used for passwords.
additionally to what Anonym wrote (that using salted passwords is quite secure on its own already), we cannot easily use any SHA2-type algorithm because it's not contained in vanilla PHP distros. Emulating it in PHP-Scope would be both slow and a risk in implementation.
anonym am um :
Hi Garvin,
great to hear that MD5 will be dumped. The soft migration sounds good and salting sounds good too.
But why not using a Hash-algorithm from the SHA-2 family (SHA512 etc.) now? It's what the NIST currently recommends (at least until the next generation hash is found). Performance should'nt be an issue here because the value would be calculated infrequently.
Simone am um :
I agree. If you're going to change, you might want to skip what's already considered unsecure. See http://www.schneier.com/blog/archives/2005/02/sha1_broken.html
Anonym am um :
read your link and try to understand... when salted, md5 and sha1 are both secure if used for passwords.
Garvin am um :
anonym,
additionally to what Anonym wrote (that using salted passwords is quite secure on its own already), we cannot easily use any SHA2-type algorithm because it's not contained in vanilla PHP distros. Emulating it in PHP-Scope would be both slow and a risk in implementation.
Simone am um :
hm... are you sure?
http://www.neurofuzz.com/modules/software/ssha_attack.php
Simone am um :
hm, the previous link actually talks about brute-forcing, so that may not be so useful after all... sorry :-)