Best encyption methods?

Reply

Join Date: Nov 2009
Posts: 22
Reputation: Devoted Hosting is an unknown quantity at this point 
Solved Threads: 4
Devoted Hosting Devoted Hosting is offline Offline
Newbie Poster
 
0
  #51
Nov 8th, 2009
Originally Posted by SKANK!!!!! View Post
i dont understand how to do randomly salted.
You could, for example, have:

  1. $hash = substr( sha1(rand()), rand(1,30), 10);

As the random salt - i.e., a 10 character long string, from the sha1() sum of a random number.

Then do:

  1. $encPass = sha1( sha1($origPass) . $hash );

or something like that. Then store both variables in a database for when it comes to checking the login.

That's the basic idea, anywhoo.
Devoted Hosting
High Quality Shared And Reseller Hosting
cPanel, 24/7 support, 99.9% uptime guaranteed
Reply With Quote Quick reply to this message  
Join Date: Sep 2007
Posts: 1,540
Reputation: cwarn23 has a spectacular aura about cwarn23 has a spectacular aura about cwarn23 has a spectacular aura about 
Solved Threads: 137
cwarn23's Avatar
cwarn23 cwarn23 is offline Offline
Posting Virtuoso
 
0
  #52
Nov 8th, 2009
im pretty sure that is ok o use just sha1 being its a forty char long encryption.
I wonder what the world will be like in a few years time when that 4TB cd comes out where TB's of diskspace can be stored on just a few disks. So it would be possible to make to have a cd collection containing compressed dehashing data to the 7 digits. That's only the near future as in a few years. In maybe 15 years we may be able to store 15 digits on server farms during the time when a cd holds 23PB (petabytes) and each harddrive in the server farm contains 256EB (ExaBytes = 1024^6 bytes). What is your advice on preventing serverfarms dehashing where a single computer can hold 256EB and there could be hundreds of computers on a hackers personal server farm. Well Google will need somewhere to store all of those youtube videos in the future. That is when the world goes into crises which I am already thinking about preventing today. So my advice, don't wait till the year 10,000 for the millennium bug. Fix it right away.
Try not to bump 10 year old threads as it can be really annoying.
http://syntax.cwarn23.net/
Smilies: ^_* +_+ v_v -_- *~*`
My favourite PC. - Oopy Doopy Do 2U2!
Reply With Quote Quick reply to this message  
Join Date: Apr 2009
Posts: 290
Reputation: SKANK!!!!! is an unknown quantity at this point 
Solved Threads: 2
SKANK!!!!!'s Avatar
SKANK!!!!! SKANK!!!!! is offline Offline
Posting Whiz in Training
 
0
  #53
Nov 8th, 2009
Originally Posted by cwarn23 View Post
I wonder what the world will be like in a few years time when that 4TB cd comes out where TB's of diskspace can be stored on just a few disks. So it would be possible to make to have a cd collection containing compressed dehashing data to the 7 digits. That's only the near future as in a few years. In maybe 15 years we may be able to store 15 digits on server farms during the time when a cd holds 23PB (petabytes) and each harddrive in the server farm contains 256EB (ExaBytes = 1024^6 bytes). What is your advice on preventing serverfarms dehashing where a single computer can hold 256EB and there could be hundreds of computers on a hackers personal server farm. Well Google will need somewhere to store all of those youtube videos in the future. That is when the world goes into crises which I am already thinking about preventing today. So my advice, don't wait till the year 10,000 for the millennium bug. Fix it right away.
no im not sure i follow this very well. i dont think that its too hard to hack right now. but its illegal and people shouldnt do it just because. theyh could go to jeal etc..
Reply With Quote Quick reply to this message  
Join Date: Sep 2007
Posts: 1,540
Reputation: cwarn23 has a spectacular aura about cwarn23 has a spectacular aura about cwarn23 has a spectacular aura about 
Solved Threads: 137
cwarn23's Avatar
cwarn23 cwarn23 is offline Offline
Posting Virtuoso
 
0
  #54
Nov 8th, 2009
Originally Posted by SKANK!!!!! View Post
no im not sure i follow this very well. i dont think that its too hard to hack right now. but its illegal and people shouldnt do it just because. theyh could go to jeal etc..
It isn't illegal to dehash a hash unless you intend to use the crack for stealing passwords etc. So if for example you wanted to encode data and decode it using hashes that is not illegal. It is only illegal once you start stealing peoples passwords and one day a hash function on it's own will be very useless unless additional heavy security measures are taken.
Try not to bump 10 year old threads as it can be really annoying.
http://syntax.cwarn23.net/
Smilies: ^_* +_+ v_v -_- *~*`
My favourite PC. - Oopy Doopy Do 2U2!
Reply With Quote Quick reply to this message  
Join Date: Apr 2009
Posts: 290
Reputation: SKANK!!!!! is an unknown quantity at this point 
Solved Threads: 2
SKANK!!!!!'s Avatar
SKANK!!!!! SKANK!!!!! is offline Offline
Posting Whiz in Training
 
0
  #55
Nov 9th, 2009
Originally Posted by cwarn23 View Post
It isn't illegal to dehash a hash unless you intend to use the crack for stealing passwords etc. So if for example you wanted to encode data and decode it using hashes that is not illegal. It is only illegal once you start stealing peoples passwords and one day a hash function on it's own will be very useless unless additional heavy security measures are taken.
oh well i only "hash" passwords. theres nothing else o my site that needs encrypting
Reply With Quote Quick reply to this message  
Join Date: Sep 2007
Posts: 1,540
Reputation: cwarn23 has a spectacular aura about cwarn23 has a spectacular aura about cwarn23 has a spectacular aura about 
Solved Threads: 137
cwarn23's Avatar
cwarn23 cwarn23 is offline Offline
Posting Virtuoso
 
0
  #56
Nov 9th, 2009
Originally Posted by SKANK!!!!! View Post
oh well i only "hash" passwords. theres nothing else o my site that needs encrypting
I was meaning that in the future todays hash functions will eventually be used as encryption functions as they would in the future easily be decrypted. But the technology is till to come in many many years so most people don't worry about that part of future security unlike myself who secures every piece by future standards.
Try not to bump 10 year old threads as it can be really annoying.
http://syntax.cwarn23.net/
Smilies: ^_* +_+ v_v -_- *~*`
My favourite PC. - Oopy Doopy Do 2U2!
Reply With Quote Quick reply to this message  
Join Date: Apr 2009
Posts: 33
Reputation: kaion is an unknown quantity at this point 
Solved Threads: 6
kaion kaion is offline Offline
Light Poster
 
0
  #57
Nov 9th, 2009
@CWARN23 i got to change my hashing technique just because of you though it a nice piece of ingenuity you get going with your site and these definitely is an interesting thread big up.shalom shalom
Reply With Quote Quick reply to this message  
Join Date: Apr 2009
Posts: 290
Reputation: SKANK!!!!! is an unknown quantity at this point 
Solved Threads: 2
SKANK!!!!!'s Avatar
SKANK!!!!! SKANK!!!!! is offline Offline
Posting Whiz in Training
 
0
  #58
Nov 10th, 2009
well i tried to log into m site today i get zero sized error. i think it has to do with the host. because i dont dehash my passwords they want to make my site unusable? awful.
Reply With Quote Quick reply to this message  
Join Date: Nov 2009
Posts: 22
Reputation: Devoted Hosting is an unknown quantity at this point 
Solved Threads: 4
Devoted Hosting Devoted Hosting is offline Offline
Newbie Poster
 
0
  #59
Nov 10th, 2009
Originally Posted by SKANK!!!!! View Post
well i tried to log into m site today i get zero sized error. i think it has to do with the host. because i dont dehash my passwords they want to make my site unusable? awful.
That's nothing to do with encrypting/decrypting, just means that something went wrong on your host's end with (most probably) Apache.
Devoted Hosting
High Quality Shared And Reseller Hosting
cPanel, 24/7 support, 99.9% uptime guaranteed
Reply With Quote Quick reply to this message  
Join Date: Apr 2009
Posts: 290
Reputation: SKANK!!!!! is an unknown quantity at this point 
Solved Threads: 2
SKANK!!!!!'s Avatar
SKANK!!!!! SKANK!!!!! is offline Offline
Posting Whiz in Training
 
0
  #60
Nov 10th, 2009
i dont tink they wil fix it i made a forum post they said its a error that is rare and that the unhasing seemed like nothing to do with it whne i red the posts they made. then i heard that its caused by stuff that i know i didnt do. so it must be the dehasing they are liars. i think they want to incriminate anyone for dehashing when they dont~ i dont dehash i am not a cirminal
Reply With Quote Quick reply to this message  
Reply

Message:



Other Threads in the PHP Forum


Views: 3814 | Replies: 109
Thread Tools Search this Thread



Tag cloud for PHP
About Us | Contact Us | Advertise | DaniWeb | Acceptable Use Policy | RSS Feed

©2003 - 2009 DaniWeb® LLC