As i recently listed our subjects about php, i haven't seen any about encryption and hashes, so i decided to made one

In this thread i will introduce you two the most common used solutions for encryption data in php... md5 and sha1...

on the very begin we need to define word hash. Hash is a structure which we get from data after few mathematical operations done on it (after it gets encrypted).

The most common ways to crypt a data in php are md5 and sha1... now we will se examples of this encryptions

md5 or Message-Digest algorithm 5 is the most common used crypting way in world of web hash is 128-bit size. Lets see an example:


sha1 or Secure Hash Algorithm is the most used method for encrypting passwords in sql bases. size of his hash is in the most cases about ~ 160-bit.
one more example:


in the using of this encryptions in php will be talking soon, cos it is late here, and I am sleepy

Mmm, these are powerful forms of encryption also something worth while checking out:
DES http://www.tropsoft.com/strongenc/des.htm

Very interesting forms of encryption i can say too. Greetz legislator !

No thats the difference. SHA1/MD5 are a hash, they cannot be decrypted like DES and others. SMF uses a SHA1 hash and you can see an example in my thread in the vb section.

(03-30-2010 07:54 AM)FreckleS Wrote:  No thats the difference. SHA1/MD5 are a hash, they cannot be decrypted like DES and others. SMF uses a SHA1 hash and you can see an example in my thread in the vb section.

Incorrect.
Also they are great big difference between the 2 type of hashs!
MD5 and SHA1 have also been compromised.

Any hash can be cracked no matter how complexed it is just takes more complexed reversing and more processing power

Example of Offline MD5 Cracker:
http://www.oxid.it/cain.html

Example of Online MD5 Cracker:
http://www.milw0rm.com/md5/insert.php

Didn't say cracked, said decrypted. There is a difference with encryption you will provide the key, this key is needed for the decryption however hashes use a general formula

decrypted = mathematical solution for finding a hash value
cracked = bruteforcing, dictionary attacks (mathematic logic, Permutation, variation...)

I am always first try mathematical solutions... I am doing cracking only when i am desperate

(03-30-2010 12:23 PM)FreckleS Wrote:  Didn't say cracked, said decrypted. There is a difference with encryption you will provide the key, this key is needed for the decryption however hashes use a general formula

Thanks i do know difference between them both.
I think it's way i worded my post got you confused.

I was just pointing out it's that MD5 and SHA1 are not the most secure hash out there.

The most secured hash is algorithm made by yourself

(03-31-2010 02:17 AM)l3g1sl4tor Wrote:  The most secured hash is algorithm made by yourself

Wow one of the best quotes i have ever heard !
Is it your quote or you have heard it somewhere ?