Forum Moderators: phranque

Message Too Old, No Replies

MD5 Hash

how secure?

         

henry0

10:29 pm on Jan 9, 2004 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



My templating system is behind authentication
and PW hashed (MD5)
Each of my members "own" via CMS
their few WebPages

We are not here speaking about protecting credit card #
but I am wondering if each individual content is quite sufficiently protected
Is it safe enough and does it offer enough protection against the average hacker?
Again I am not contemplating actions from a top-notch hacker!
Still my clients need to receive a good content protection

Regards

Henry

plumsauce

3:48 am on Jan 10, 2004 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member




The hash itself is extremely secure.

How you control usage of the hash is
the weakpoint.

henry0

11:41 am on Jan 10, 2004 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Could you please develop your statement

regards

Henry

plumsauce

7:46 pm on Jan 10, 2004 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member




it means that the chances of brute forcing the md5
associated with an account is practically impossible.

but, if your application does a whoops in checking
for the hash, then the door is open.

in other words, the programming errors will get you
every time, not the hash itself.

henry0

8:08 pm on Jan 10, 2004 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Thanks
got it
regards
Henry