News Feed
Sections




News Archive
Looking for more information on how to do PHP the right way? Check out PHP: The Right Way

Shay Ben Moshe's Blog:
Hashing Passwords Properly
May 13, 2011 @ 08:47:42

Shay Ben Moshe has a new post to his blog looking at a method he's come up with for hashing passwords the proper way and saving them to a database for future checking. His encryption methods of choice crypt and a random salt generator.

The easy and common solution for this particular problem is to use an one-way hash function, such as md5 and sha1, which takes the password and encrypts it. Unfortunately, this method is not as strong as you may think. [...] We can protect our password from rainbow tables and similar attacks by using salts.

He talks about storing passwords in a database (never as plain text!) and what rainbow tables are and how they can make it simple for a user to break a poorly hashed value. He shows how to use the crypt function together with the sha512 hashing tool to make a salt.

0 comments voice your opinion now!
password hashing crypt sha512 tutorial


blog comments powered by Disqus

Similar Posts

DevShed: Using Code Igniter to Enable Comments in a Blog Application

NuoDB Blog: CodeIgniter - Fired Up on NuoDB

PHPRiot.com: Zend Framework 101: Zend_Loader

Mrinmoy Ghoshal's Blog: Concept of Strings:PHP

NetTuts.com: Understanding Hash Functions and Keeping Passwords Safe


Community Events





Don't see your event here?
Let us know!


interview language code laravel developer podcast introduction api bugfix community wordpress framework library configure project application threedevsandamaybe series release list

All content copyright, 2014 PHPDeveloper.org :: info@phpdeveloper.org - Powered by the Solar PHP Framework