View Full Version : MD5 or SHA1 Encription
08-23-2007, 07:00 PM
Which is best? I know MD5 is 128-Bit and SHA1 160-Bit. But which one is better for a login system!
08-23-2007, 07:50 PM
08-23-2007, 08:02 PM
Whichever hash method you use, always append/prepend a "salt" string to the value being hashed. This will make the brute-force/dictionary/database-lookup methods ineffective at finding the original value.
08-23-2007, 09:45 PM
MD5 already has a lookup table constructed for unsalted values that will provide an enterable value to match any hash and so must use a salt to have any security at all. SHA1 is way more secure and has yet to be broken that way. With a salt MD5 is secure enough for most purposes.
08-24-2007, 09:03 AM
08-24-2007, 09:24 PM
sha1 all the way
08-24-2007, 09:34 PM
i use sha1()
Powered by vBulletin® Version 4.2.2 Copyright © 2016 vBulletin Solutions, Inc. All rights reserved.