Re: PGSQL encryption functions - Mailing list pgsql-sql

From Mark R. Dingee
Subject Re: PGSQL encryption functions
Date
Msg-id 200511011700.50776.mark.dingee@cox.net
Whole thread Raw
In response to Re: PGSQL encryption functions  (Bruno Wolff III <bruno@wolff.to>)
Responses Re: PGSQL encryption functions  (Tom Lane <tgl@sss.pgh.pa.us>)
Re: PGSQL encryption functions  (Bruno Wolff III <bruno@wolff.to>)
List pgsql-sql
Bruno,

I use an authenticate() function as a part of state maintenance in a PHP web 
app.  In the function, I generate an encrypted token that is then used in the 
validation process on subsequent pages.  md5 works, but I've been able to 
brute-force crack it very quickly, so I'm looking for an alternative.  Any 
thoughts would be greatly appreciated.

Thanks,
Mark

On Tuesday 01 November 2005 04:28 pm, Bruno Wolff III wrote:
> On Tue, Nov 01, 2005 at 14:38:05 -0500,
>
>   "Mark R. Dingee" <mark.dingee@cox.net> wrote:
> > Everyone,
> >
> > I'm in need of a one-way pgsql script that will take a plain-text string
> > and return an ecrypted string (preferably 32 character) .  I've been
> > using md5('string'), but I'm concerned it's too weak for my needs.  Does
> > anyone have any recommendations?
>
> What are your needs?
>
> ---------------------------(end of broadcast)---------------------------
> TIP 4: Have you searched our list archives?
>
>                http://archives.postgresql.org


pgsql-sql by date:

Previous
From: "Lane Van Ingen"
Date:
Subject: Can't Get SETOF Function to Work
Next
From: Tom Lane
Date:
Subject: Re: PGSQL encryption functions