Return Styles: Pseud0ch, Terminal, Valhalla, NES, Geocities, Blue Moon. Entire thread

Salting and MySQL

Name: qallaf89 2012-10-03 19:06

Can someone provide me with an example of how to use encryption using Blowfish (or ADES) and salting for a user password in PHP using MySQL ?

Also, i am new to crypto so any suggestion would be appreciated.

Name: Anonymous 2012-10-04 10:31

>>10
That's exactly why it's cargo cult programming. You don't understand why HMAC does what it does, so you're just going through the motions.
HMAC is not meant for password storage. For password storage, you need a slow hash. If you're using MD5 or SHA1, you're doing it wrong.

And you never roll your own crypto. If you want HMAC, use hash_hmac. That's what it's for.

The real answer to >>1's question is http://www.openwall.com/phpass/.

Newer Posts
Don't change these.
Name: Email:
Entire Thread Thread List