Hashed password secure?

From: Jarma (jarmato_at_wp.pl)
Date: 06/28/04


Date: Mon, 28 Jun 2004 21:13:25 +0200

Is keeping password hashed by e.g. MD5 or SHA secure? I mean verification
would be comparing hash values of key(password) and this hash value would be
easy to obtain (= known). Hash functions are one direction funtions, but
would revealing password's hash value be secure? (I'm thinking of
brute-force method among others).



Relevant Pages

  • new type of MAC?
    ... is it possible to have a hash algorithm that uses a symmetric key ... instead of a public/private keypair, ... where the signing and verification would require only the passhrase? ...
    (sci.crypt)
  • Re: Hash Function problem
    ... So even if the verification step is expensive, ... same hash means same data with a pretty good confidence. ... you need to find a better MD5 implementation. ...
    (comp.programming)
  • Re: Outrageous claims on cash collision exploits???
    ... Martin Bodenstedt wrote: ... >> hash must be signed. ... private key anyone knowing the public key can verify the hash. ... the public key of the recipient no verification of the hash is possible ...
    (sci.crypt)