Welche Funktion zur Speicherung von Passwörtern verwenden?

Collapse
This topic is closed.
X
X
Collapse
 
  • Page of 1
  • Time
  • Show
Clear All
new posts
Previous template Next
  • Christian Aigner
    #1

    Welche Funktion zur Speicherung von Passwörtern verwenden?

    ENCRYPT()
    PASSWORD()
    MD5()
    SHA1()

    Welche dieser Funktionen sollte ich verwenden, um Passwörter in einer
    Datenbank zu speichern? Welche Vor- und Nachteile haben die einzelnen
    Funktionen?

    TIA,
    Christian

    Tags: None
    • shimmyshack
      #2
      =?iso-8859-1?q?Re:_Welche_ Funktion_zur_Sp eicherung_von_P assw=F6rtern_ve rwenden=3F?=

      On Mar 30, 4:32 pm, Christian Aigner <Christian.Aig. ..@gmx.netwrote :
      ENCRYPT()
      PASSWORD()
      MD5()
      SHA1()
      >
      Welche dieser Funktionen sollte ich verwenden, um Passwörter in einer
      Datenbank zu speichern? Welche Vor- und Nachteile haben die einzelnen
      Funktionen?
      >
      TIA,
      Christian
      ENCRYPT() is a two way encryption/decryption function so you don't
      need this unless you will be decrypting as well - which normally you
      don't do when storing passwords in a database.

      PASSWORD(), MD5(), SHA1() are one way hashes, so choose from these


      :) mysql: PASSWORD() - it has changed over time.

      MD5 and SHA1 are older and less strong than easily used SHA256 and
      SHA-512 etc... so why not use SHA-256, SHA-384, SHA-512 etc..

      <?php print_r(hash_al gos()); ?>

      use the strongest one you feel comfortable with. (they are all strong
      enough for most practical purposes)




        Comment

        • Curtis
          #3
          Re: Welche Funktion zur Speicherung von =?ISO-8859-1?Q?Passw=F6r?= =?ISO-8859-1?Q?tern_verwen den=3F?=

          shimmyshack wrote:
          On Mar 30, 4:32 pm, Christian Aigner <Christian.Aig. ..@gmx.netwrote :
          >ENCRYPT()
          >PASSWORD()
          >MD5()
          >SHA1()
          >>
          >Welche dieser Funktionen sollte ich verwenden, um Passwörter in einer
          >Datenbank zu speichern? Welche Vor- und Nachteile haben die einzelnen
          >Funktionen?
          >>
          >TIA,
          >Christian
          >
          ENCRYPT() is a two way encryption/decryption function so you don't
          need this unless you will be decrypting as well - which normally you
          don't do when storing passwords in a database.
          >
          PASSWORD(), MD5(), SHA1() are one way hashes, so choose from these
          >
          >
          :) mysql: PASSWORD() - it has changed over time.
          >
          MD5 and SHA1 are older and less strong than easily used SHA256 and
          SHA-512 etc... so why not use SHA-256, SHA-384, SHA-512 etc..
          >
          <?php print_r(hash_al gos()); ?>
          >
          use the strongest one you feel comfortable with. (they are all strong
          enough for most practical purposes)
          >
          >
          >
          >
          Choosing the best one to store passwords in your database would
          probably be SHA1, unless you want to use the mcrypt library, in which
          case you could use SHA-256 or SHA-512.

          You should not use an encryption, because passwords should be hashed
          once, and not decrypted. You don't need to use encryption over hashing
          to log people in, if that's what the OP was thinking.

          Curtis, http://dyersweb.com

            Comment

            Previous template Next
            Working...