On 2/27/07, tom arnall <[EMAIL PROTECTED]> wrote:
how good is 'crypt()'? it seems that for small differences in the target string you get duplicate digests. i get the following results (using debugger):
snip
Better than rot13, but worse than most other forms of encryption. The crypt function is not intended to withstand attacks where the target has access to the encrypted text. This is the reason most password programs will lock an account if more than three failures occur in a row. If you are looking for reasonably secure encryption you need to look at the Crypt::* modules on CPAN. Personally I just use GPG or PGP (depending on what is installed). -- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] http://learn.perl.org/
