944,138 Members | Top Members by Rank

Ad:
  • PHP Discussion Thread
  • Marked Solved
  • Views: 8372
  • PHP RSS
You are currently viewing page 6 of this multi-page discussion thread; Jump to the first page
Nov 8th, 2009
0
Re: Best encyption methods?
Click to Expand / Collapse  Quote originally posted by SKANK!!!!! ...
i dont understand how to do randomly salted.
You could, for example, have:

php Syntax (Toggle Plain Text)
  1. $hash = substr( sha1(rand()), rand(1,30), 10);

As the random salt - i.e., a 10 character long string, from the sha1() sum of a random number.

Then do:

php Syntax (Toggle Plain Text)
  1. $encPass = sha1( sha1($origPass) . $hash );

or something like that. Then store both variables in a database for when it comes to checking the login.

That's the basic idea, anywhoo.
Reputation Points: 12
Solved Threads: 6
Light Poster
Devoted Hosting is offline Offline
29 posts
since Nov 2009
Nov 8th, 2009
0
Re: Best encyption methods?
Quote ...
im pretty sure that is ok o use just sha1 being its a forty char long encryption.
I wonder what the world will be like in a few years time when that 4TB cd comes out where TB's of diskspace can be stored on just a few disks. So it would be possible to make to have a cd collection containing compressed dehashing data to the 7 digits. That's only the near future as in a few years. In maybe 15 years we may be able to store 15 digits on server farms during the time when a cd holds 23PB (petabytes) and each harddrive in the server farm contains 256EB (ExaBytes = 1024^6 bytes). What is your advice on preventing serverfarms dehashing where a single computer can hold 256EB and there could be hundreds of computers on a hackers personal server farm. Well Google will need somewhere to store all of those youtube videos in the future. That is when the world goes into crises which I am already thinking about preventing today. So my advice, don't wait till the year 10,000 for the millennium bug. Fix it right away.
Sponsor
Featured Poster
Reputation Points: 410
Solved Threads: 258
Occupation: Genius
cwarn23 is offline Offline
3,004 posts
since Sep 2007
Nov 8th, 2009
0
Re: Best encyption methods?
Click to Expand / Collapse  Quote originally posted by cwarn23 ...
I wonder what the world will be like in a few years time when that 4TB cd comes out where TB's of diskspace can be stored on just a few disks. So it would be possible to make to have a cd collection containing compressed dehashing data to the 7 digits. That's only the near future as in a few years. In maybe 15 years we may be able to store 15 digits on server farms during the time when a cd holds 23PB (petabytes) and each harddrive in the server farm contains 256EB (ExaBytes = 1024^6 bytes). What is your advice on preventing serverfarms dehashing where a single computer can hold 256EB and there could be hundreds of computers on a hackers personal server farm. Well Google will need somewhere to store all of those youtube videos in the future. That is when the world goes into crises which I am already thinking about preventing today. So my advice, don't wait till the year 10,000 for the millennium bug. Fix it right away.
no im not sure i follow this very well. i dont think that its too hard to hack right now. but its illegal and people shouldnt do it just because. theyh could go to jeal etc..
Reputation Points: 15
Solved Threads: 7
Posting Pro in Training
SKANK!!!!! is offline Offline
428 posts
since Apr 2009
Nov 8th, 2009
0
Re: Best encyption methods?
Click to Expand / Collapse  Quote originally posted by SKANK!!!!! ...
no im not sure i follow this very well. i dont think that its too hard to hack right now. but its illegal and people shouldnt do it just because. theyh could go to jeal etc..
It isn't illegal to dehash a hash unless you intend to use the crack for stealing passwords etc. So if for example you wanted to encode data and decode it using hashes that is not illegal. It is only illegal once you start stealing peoples passwords and one day a hash function on it's own will be very useless unless additional heavy security measures are taken.
Sponsor
Featured Poster
Reputation Points: 410
Solved Threads: 258
Occupation: Genius
cwarn23 is offline Offline
3,004 posts
since Sep 2007
Nov 9th, 2009
0
Re: Best encyption methods?
Click to Expand / Collapse  Quote originally posted by cwarn23 ...
It isn't illegal to dehash a hash unless you intend to use the crack for stealing passwords etc. So if for example you wanted to encode data and decode it using hashes that is not illegal. It is only illegal once you start stealing peoples passwords and one day a hash function on it's own will be very useless unless additional heavy security measures are taken.
oh well i only "hash" passwords. theres nothing else o my site that needs encrypting
Reputation Points: 15
Solved Threads: 7
Posting Pro in Training
SKANK!!!!! is offline Offline
428 posts
since Apr 2009
Nov 9th, 2009
0
Re: Best encyption methods?
Click to Expand / Collapse  Quote originally posted by SKANK!!!!! ...
oh well i only "hash" passwords. theres nothing else o my site that needs encrypting
I was meaning that in the future todays hash functions will eventually be used as encryption functions as they would in the future easily be decrypted. But the technology is till to come in many many years so most people don't worry about that part of future security unlike myself who secures every piece by future standards.
Sponsor
Featured Poster
Reputation Points: 410
Solved Threads: 258
Occupation: Genius
cwarn23 is offline Offline
3,004 posts
since Sep 2007
Nov 9th, 2009
0
Re: Best encyption methods?
@CWARN23 i got to change my hashing technique just because of you though it a nice piece of ingenuity you get going with your site and these definitely is an interesting thread big up.shalom shalom
Reputation Points: 13
Solved Threads: 8
Light Poster
kaion is offline Offline
36 posts
since Apr 2009
Nov 10th, 2009
0
Re: Best encyption methods?
well i tried to log into m site today i get zero sized error. i think it has to do with the host. because i dont dehash my passwords they want to make my site unusable? awful.
Reputation Points: 15
Solved Threads: 7
Posting Pro in Training
SKANK!!!!! is offline Offline
428 posts
since Apr 2009
Nov 10th, 2009
0
Re: Best encyption methods?
Click to Expand / Collapse  Quote originally posted by SKANK!!!!! ...
well i tried to log into m site today i get zero sized error. i think it has to do with the host. because i dont dehash my passwords they want to make my site unusable? awful.
That's nothing to do with encrypting/decrypting, just means that something went wrong on your host's end with (most probably) Apache.
Reputation Points: 12
Solved Threads: 6
Light Poster
Devoted Hosting is offline Offline
29 posts
since Nov 2009
Nov 10th, 2009
0
Re: Best encyption methods?
i dont tink they wil fix it i made a forum post they said its a error that is rare and that the unhasing seemed like nothing to do with it whne i red the posts they made. then i heard that its caused by stuff that i know i didnt do. so it must be the dehasing they are liars. i think they want to incriminate anyone for dehashing when they dont~ i dont dehash i am not a cirminal
Reputation Points: 15
Solved Threads: 7
Posting Pro in Training
SKANK!!!!! is offline Offline
428 posts
since Apr 2009

This thread is solved

Either the thread starter or a moderator has marked this thread as solved. You can most likely trust the responses and answers given. There is most likely no reason for any further responses to be posted here. If you have a related question, please start a new thread in this forum instead.

This thread is more than three months old

No one has posted to this discussion for at least three months. Please let old threads die and do not reply to them unless you feel you have something new and valuable to contribute that absolutely must be added to make the discussion complete. Otherwise, please start a new thread in this forum instead.
Message:
Previous Thread in PHP Forum Timeline: Access Control Limit Question
Next Thread in PHP Forum Timeline: Read and Write to text file





About Us | Contact Us | Advertise | Acceptable Use Policy
Forum Index | Build Custom RSS Feed


Follow us on Twitter


© 2011 DaniWeb® LLC