Re: SHA1 authentication - Mailing list pgsql-general

From Bruno Wolff III
Subject Re: SHA1 authentication
Date
Msg-id 20051027161600.GA11072@wolff.to
Whole thread Raw
In response to Re: SHA1 authentication  (Martijn van Oosterhout <kleptog@svana.org>)
Responses Re: SHA1 authentication  (Brian Mathis <brian.mathis@gmail.com>)
List pgsql-general
On Mon, Oct 24, 2005 at 11:33:50 +0200,
  Martijn van Oosterhout <kleptog@svana.org> wrote:
>
> By all means, submit a patch but there's no real hurry right now. We
> should probably move straight to something more secure anyway, maybe
> SHA-256 or something.

This makes more sense. There is little point in going to the effort to
changing to SHA-1 only to change again later.
There isn't any hurry to change now, so it might be better to wait until
the next group of hash functions is designed, built on lessons learned from
the attacks against MD5 and SHA-1.

pgsql-general by date:

Previous
From: "codeWarrior"
Date:
Subject: Re: pg_dump fails when it gets to table containing bytea
Next
From: Noel Whelan
Date:
Subject: Re: improve 'where not exists' query..