Hello and welcome to our community! Is this your first visit?
Register
Enjoy an ad free experience by logging in. Not a member yet? Register.
Results 1 to 5 of 5
  1. #1
    Regular Coder
    Join Date
    Jun 2008
    Posts
    104
    Thanks
    71
    Thanked 0 Times in 0 Posts

    Arrow SHA-512 vs Whirlpool?

    I'm using the following to create a password hash:

    Code:
    $password = hash('sha512',$pass . $salt);
    but when choosing SHA-512 over Whirlpool, is one better than the other?

    Thanks!

  • #2
    Regular Coder
    Join Date
    Jun 2008
    Posts
    104
    Thanks
    71
    Thanked 0 Times in 0 Posts
    I'm using a random password and salt to create the hash, so maybe it doesn't matter which one I use?

  • #3
    New to the CF scene
    Join Date
    Sep 2011
    Posts
    6
    Thanks
    0
    Thanked 0 Times in 0 Posts
    Sorry to back this topic but this question interests me also.
    I await your answers.

  • #4
    Super Moderator Inigoesdr's Avatar
    Join Date
    Mar 2007
    Location
    Florida, USA
    Posts
    3,638
    Thanks
    2
    Thanked 404 Times in 396 Posts
    I haven't seen any evidence that one is a clear winner in terms of security. Using a salted string with both should produce a very secure hash. Whirlpool is newer & not used as much(in my experience) and SHA512 is generated faster, so I would go with SHA512. You could definitely argue that the difference is negligible, though, from what I've read.

  • #5
    Regular Coder hinch's Avatar
    Join Date
    Sep 2005
    Location
    UK
    Posts
    923
    Thanks
    25
    Thanked 80 Times in 80 Posts
    be wary if your application links to other languages specifically passing hashes to c# apps for decryption there's padding issues to be had since php and .net handle byte padding differently.
    A programmer is just a tool which converts caffeine into code

    My work: http://www.fcsoftware.co.uk && http://www.firstcontactcrm.com
    My hobby: http://www.angel-computers.co.uk
    My life: http://www.furious-angels.com


  •  

    Posting Permissions

    • You may not post new threads
    • You may not post replies
    • You may not post attachments
    • You may not edit your posts
    •