Re: SHA-1 vs MD5 - Mailing list pgsql-sql

From Chad Wagner
Subject Re: SHA-1 vs MD5
Date
Msg-id 81961ff50703080652o41274e2djc5b789fb4da9bd27@mail.gmail.com
Whole thread Raw
In response to Re: SHA-1 vs MD5  ("Ezequias Rodrigues da Rocha" <ezequias.rocha@gmail.com>)
Responses Re: SHA-1 vs MD5
List pgsql-sql
On 3/8/07, Ezequias Rodrigues da Rocha <ezequias.rocha@gmail.com> wrote:
I really don't have the pgcrypto. It could be a nice alternative. Could you tell me the steps to install it ?

I am very concerned about security in my application becouse we are going to moviment a large ammount of information and money. As much i take care of it as good.

SHA1 and MD5 are hashing algorithms, they are typically used for passwords and in conjunction with public key encryption or over-the-wire encryption to sign the message.  If you are really concerned about security, you may want to hire an experienced person in the security engineering field.  Especially if you are talking about financial information.
 

I know some problem of MD5 and know it is very good too. If someone could tell me where MD5 is used I could be more relaxed.


The impression I get is that SHA-256, SHA-384, or SHA-512 are the preferred hashing algorithms, but I really don't keep up on it.  Many many password systems use MD5, I think it is reasonably safe.

pgsql-sql by date:

Previous
From: "Ezequias Rodrigues da Rocha"
Date:
Subject: Re: SHA-1 vs MD5
Next
From: Greg Toombs
Date:
Subject: A form of inheritance with PostgreSQL