[dba-Tech] Never use MD5 encryption

Jim Lawrence accessd at shaw.ca
Tue May 22 19:44:16 CDT 2012


If you still have databases out there that are using MD5 encryption, give
your head a shake. It is so easy to crack it is nothing less than a joke.
Some older versions of MySQL use to allow MD5 encrypted fields...worthless.

How is it is to crack an MD5 encryption scheme? Try the following encrypted
value: 569a70c2ccd0ac41c9d1637afe8cd932 and go to site:
http://www.md5hacker.com/

The current encryption standards are: PBKDF2
http://en.wikipedia.org/wiki/PBKDF2

Or a relatively old but good method: BCRYPT
http://bcrypt.sourceforge.net/

Or the latest boy on the block: SCRYPT
http://www.tarsnap.com/scrypt.html

Jim



More information about the dba-Tech mailing list