Re: [PHP-DEV] SHA-1 support

2002-02-17 Thread Stefan Roehrich
On 2002-02-17 19:31:40, André Næss wrote: > I just read some general discussions on the topic in misc. security related > boards and got the impression that the consensus was that MD5 should be > phased out and replaced by SHA-1. That may be true for some new applications (where you can use mhash

Re: [PHP-DEV] SHA-1 support

2002-02-17 Thread André Næss
"Stefan Roehrich" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > On 2002-02-17 17:35:26, André Næss wrote: > > nice though, just to tell people about other hashing functions. Maybe there > > should also be a mention of the fact that MD5 is fairly easy to crack?

Re: [PHP-DEV] SHA-1 support

2002-02-17 Thread André Næss
"Christian Stocker" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Who said that? Never heard of any claims, that md5 is insecure ... http://mdcrack.multimania.com/index2.html André Næss -- PHP Development Mailing List To unsubscrib

Re: [PHP-DEV] SHA-1 support

2002-02-17 Thread Stefan Roehrich
On 2002-02-17 17:35:26, André Næss wrote: > nice though, just to tell people about other hashing functions. Maybe there > should also be a mention of the fact that MD5 is fairly easy to crack? Can you give some references? Yes, MD5 does have some weaknesses (so SHA1 would probably be better), bu

Re: [PHP-DEV] SHA-1 support

2002-02-17 Thread Christian Stocker
In <[EMAIL PROTECTED]>, André NæSs wrote: > "Markus Fischer" <[EMAIL PROTECTED]> wrote in message > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > >> I can see a possible point with a dedicated sha1() function, but I >> don't see one in saying that mhash() is badly documented (even if >

Re: [PHP-DEV] SHA-1 support

2002-02-17 Thread André Næss
"Markus Fischer" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > I can see a possible point with a dedicated sha1() function, > but I don't see one in saying that mhash() is badly > documented (even if it was, it's very easy to find the right >

Re: [PHP-DEV] SHA-1 support

2002-02-17 Thread Markus Fischer
On Sun, Feb 17, 2002 at 04:23:24PM +0100, André Næss wrote : > I can't seem to find support for the SHA-1 algorithm in PHP. I did find the > mhash() function, but not only is this function very badly documented (no > list of what hashes it supports!), [...] http://www.php.net/manual/en/ref.m

[PHP-DEV] SHA-1 support

2002-02-17 Thread André Næss
I can't seem to find support for the SHA-1 algorithm in PHP. I did find the mhash() function, but not only is this function very badly documented (no list of what hashes it supports!), you also have to compile PHP specifially to support it. Wouldn't it be nice with a sha1() function (like md5()).