Security: SHA256 Hashing Algorithm Updated v1.1.1

Small, short code snippets that other people may find useful. Do you have a good regex that you would like to share? Share it! Even better, the code can be commented on, and improved.

Moderator: General Moderators

User avatar
John Cartwright
Site Admin
Posts: 11470
Joined: Tue Dec 23, 2003 2:10 am
Location: Toronto
Contact:

Post by John Cartwright »

Why not just use a simple salt?
User avatar
Chris Corbyn
Breakbeat Nuttzer
Posts: 13098
Joined: Wed Mar 24, 2004 7:57 am
Location: Melbourne, Australia

Post by Chris Corbyn »

Either use a salt with your md5 or just use the SHA256 like jshpro says.

Concatenating the md5 with the SHA256 does nothing if your concern is with MD5 security... you can just get the md5 via substring and crack that. The SHA256 is now insignificant ;)
DeprecatedDiva
Forum Newbie
Posts: 24
Joined: Wed Aug 03, 2005 10:47 am
Location: NW Louisiana

Re: Security: SHA256 Hashing Algorithm Updated v1.1.0

Post by DeprecatedDiva »

feyd wrote:... After I get back from my business trip, I'll put together a demo page, if someone hasn't already by then...
I am curious if a demo page was ever designed. If so, may I have the location? :o
User avatar
feyd
Neighborhood Spidermoddy
Posts: 31559
Joined: Mon Mar 29, 2004 3:24 pm
Location: Bothell, Washington, USA

Post by feyd »

I had completely forgotten about making one after I got back. The trip went on a lot longer than I expected. Hopefully, I can get my butt in gear to get one put together with a smidge of free time soon... in the mean time, PHP 5.1.2 has many hash functions built-in: hash()
User avatar
feyd
Neighborhood Spidermoddy
Posts: 31559
Joined: Mon Mar 29, 2004 3:24 pm
Location: Bothell, Washington, USA

Post by feyd »

I spent some time (several hours) making a demo script tonight. Available here.

As it says on the page:
SHA256 Demo wrote:This page was designed for Firefox 1.5, nothing else. Do not complain to me if it looks funny in your browser, because I don't care.
So, if you don't mind it looking like poo, use IE, but I'd seriously suggest using Firefox. :)

..and yes, I made a minor update to the library tonight as well.. it is now version 1.1.1 on the demo page (links to download available) .. You can even see the demo's page source if you really want to know how the page is done.
User avatar
s.dot
Tranquility In Moderation
Posts: 5001
Joined: Sun Feb 06, 2005 7:18 pm
Location: Indiana

Post by s.dot »

I don't know what the 1.1.0 to 1.1.1 update was, and I'm sure it's insignificant as I am only using this to hash a string, but downloading the zip from the demo page shows it as version 1.1.0.
Set Search Time - A google chrome extension. When you search only results from the past year (or set time period) are displayed. Helps tremendously when using new technologies to avoid outdated results.
User avatar
s.dot
Tranquility In Moderation
Posts: 5001
Joined: Sun Feb 06, 2005 7:18 pm
Location: Indiana

Post by s.dot »

actually i noticed the page you updated was 1.1.1 so I understand now.

I don't know how versions work so I don't know if that was supposed to be mentioned on the _base.php file as well :P sorry
Set Search Time - A google chrome extension. When you search only results from the past year (or set time period) are displayed. Helps tremendously when using new technologies to avoid outdated results.
User avatar
feyd
Neighborhood Spidermoddy
Posts: 31559
Joined: Mon Mar 29, 2004 3:24 pm
Location: Bothell, Washington, USA

Post by feyd »

base file hasn't changed. :P
Post Reply