 |  |  |  |  |  |  |  |
Best encyption methods?
Please support our PHP advertiser: PostgreSQL or MySQL? Compare and contrast the two most popular open source databases
 |
•
•
Join Date: Dec 2007
Posts: 626
Reputation: 
Solved Threads: 10
Practically a Master Poster
I have tried to research this and im always running into old articles.
What I have come across are (possibly more):
md5, sha1, hash, crypt and mcrypt
Now I have used md5/sha1 before and have 32/40 character long strings the others I dont know too much about but in short, what is the best encryption method? (I may have not even listed it)
Thanks, Regards X
What I have come across are (possibly more):
md5, sha1, hash, crypt and mcrypt
Now I have used md5/sha1 before and have 32/40 character long strings the others I dont know too much about but in short, what is the best encryption method? (I may have not even listed it)
Thanks, Regards X
"You never stop learning." - OmniX
•
•
Join Date: Sep 2007
Posts: 1,546
Reputation:
Solved Threads: 137
I just love this question. In my opinion, it is best to use more than one hash so that it is harder to crack. And so that those online database chrackers can't store your hash, include the whirlpool hash. So below is a function I have made for a much better hash:
The function above will be really hard to crack as it uses oppisite types of output. One of the advantages with the function above is that crc32b is short (less data recorded) and whirlpool is long (containing more data). And since a whirlpool hash is 128 characters long, I doubt anybody will have a giant database of the whirlpool conversions. Of course you could use all of the hashes in the function but may make take a bit of cpu.
Any other comments?
php Syntax (Toggle Plain Text)
Any other comments?
Try not to bump 10 year old threads as it can be really annoying.
http://syntax.cwarn23.net/
My favourite PC. - Oopy Doopy Do 2U2!
http://syntax.cwarn23.net/
Smilies: ^_* +_+ v_v -_- *~*` My favourite PC. - Oopy Doopy Do 2U2!
•
•
Join Date: Dec 2007
Posts: 626
Reputation:
Solved Threads: 10
Practically a Master Poster
I havent researched the hash method in depth but what I have understood is that:
hash('$hash_string', $variable);
$hash_string = "abc" or whateva string you wish to use as hash method
$variable = variable wanting to hash (aka password)
So in your example you have doubled hashed your password, once using a long string and then against a short string? correct?
Due to the mix of the long and short encryption you believe this is the best method of encryptions?
The above correct? Thanks
hash('$hash_string', $variable);
$hash_string = "abc" or whateva string you wish to use as hash method
$variable = variable wanting to hash (aka password)
So in your example you have doubled hashed your password, once using a long string and then against a short string? correct?
Due to the mix of the long and short encryption you believe this is the best method of encryptions?
The above correct? Thanks
"You never stop learning." - OmniX
•
•
Join Date: Sep 2007
Posts: 1,546
Reputation:
Solved Threads: 137
•
•
•
•
Originally Posted by OmniX
Due to the mix of the long and short encryption you believe this is the best method of encryptions?
The above correct? Thanks
Try not to bump 10 year old threads as it can be really annoying.
http://syntax.cwarn23.net/
My favourite PC. - Oopy Doopy Do 2U2!
http://syntax.cwarn23.net/
Smilies: ^_* +_+ v_v -_- *~*` My favourite PC. - Oopy Doopy Do 2U2!
•
•
Join Date: Dec 2007
Posts: 626
Reputation:
Solved Threads: 10
Practically a Master Poster
I forgot to ask, how many characters is the string produced?
Also am I correct in that I can use any string I wish to hash a password?
Thanks
Also am I correct in that I can use any string I wish to hash a password?
Thanks
"You never stop learning." - OmniX
•
•
Join Date: Sep 2007
Posts: 1,546
Reputation:
Solved Threads: 137
The returned hash of my truehash function is 8 characters long and yes any string or number can be hashed through this function.
Try not to bump 10 year old threads as it can be really annoying.
http://syntax.cwarn23.net/
My favourite PC. - Oopy Doopy Do 2U2!
http://syntax.cwarn23.net/
Smilies: ^_* +_+ v_v -_- *~*` My favourite PC. - Oopy Doopy Do 2U2!
•
•
Join Date: Dec 2007
Posts: 626
Reputation:
Solved Threads: 10
Practically a Master Poster
I think I didnt ask my second question correctly.
The terms 'crc32b' and 'whirlpool' are just random variables selected or actual hash functions? could I have used 'apple123' and 'banana123' instead?
The terms 'crc32b' and 'whirlpool' are just random variables selected or actual hash functions? could I have used 'apple123' and 'banana123' instead?
"You never stop learning." - OmniX
Check this link.. http://www.hudzilla.org/phpbook/read.php/17_3_7
I also read here that md5 can generate collision (and is not safe anymore!). Someone also mentions (in the 2nd link) that whirlpool (as mentioned by cwarn23) is a good replacement! SHA1 isn't a safe encryption method too!
Hmm.. I should stop using SHA1 !
I also read here that md5 can generate collision (and is not safe anymore!). Someone also mentions (in the 2nd link) that whirlpool (as mentioned by cwarn23) is a good replacement! SHA1 isn't a safe encryption method too!
Hmm.. I should stop using SHA1 ! Ignorance is definitely not bliss!
*PM asking for help will be ignored*
*PM asking for help will be ignored*
•
•
Join Date: Sep 2007
Posts: 1,546
Reputation:
Solved Threads: 137
•
•
•
•
Originally Posted by OmniX 
I think I didnt ask my second question correctly.
The terms 'crc32b' and 'whirlpool' are just random variables selected or actual hash functions? could I have used 'apple123' and 'banana123' instead?
Try not to bump 10 year old threads as it can be really annoying.
http://syntax.cwarn23.net/
My favourite PC. - Oopy Doopy Do 2U2!
http://syntax.cwarn23.net/
Smilies: ^_* +_+ v_v -_- *~*` My favourite PC. - Oopy Doopy Do 2U2!
•
•
•
•
Originally Posted by cwarn23
I just love this question. In my opinion, it is best to use more than one hash so that it is harder to crack. And so that those online database chrackers can't store your hash, include the whirlpool hash. So below is a function I have made for a much better hash:
The function above will be really hard to crack as it uses oppisite types of output. One of the advantages with the function above is that crc32b is short (less data recorded) and whirlpool is long (containing more data). And since a whirlpool hash is 128 characters long, I doubt anybody will have a giant database of the whirlpool conversions. Of course you could use all of the hashes in the function but may make take a bit of cpu.php Syntax (Toggle Plain Text)
Any other comments?
Ignorance is definitely not bliss!
*PM asking for help will be ignored*
*PM asking for help will be ignored*
|
Other Threads in the PHP Forum
- Previous Thread: Upcoming Events script (Free or Commercial)...?
- Next Thread: div tag + iframe
Views: 3868 | Replies: 109
| Thread Tools | Search this Thread |
Latest PHP Posts
- Today's Posts
- Unanswered Threads
Related Forum Features
Tag cloud for PHP
.htaccess access ajax apache api array beginner binary broken cakephp checkbox class cms code cron curl database date directory display download dynamic echo email encode error file files folder form forms function functions google howtowriteathesis href htaccess html image include insert integration ip java javascript joomla jquery limit link login loop mail menu methods mlm mod_rewrite multiple multipletables mysql oop parse paypal pdf php problem provider query radio random recursion regex remote script search select server sessions sms soap source space speed sql structure syntax system table template tutorial update updates upload url validation validator variable video web xml youtube
