Re: passwords in perl: crypt() vs mds5_hex()

2005-05-04 Thread Ing. Branislav Gerzo
JupiterHost.Net [JN], on Tuesday, May 03, 2005 at 17:31 (-0500) made these points: JN> Thanks for the input John! Any other opinions and points anyone? in my point of view is MD5 ok, but I prefer "newer" hash algos, for example SHA1 -- How do you protect mail on web? I use http://www.2pu.net [

Re: passwords in perl: crypt() vs mds5_hex()

2005-05-03 Thread JupiterHost.Net
if(crypt($mypass, $crypted_original_pass) eq $crypted_original_pass) { ... vs. use Digest::MD5 qw(md5_hex); ... if(md5_hex($mypass) eq $md5_hex_of_original_pass) { ... If you use short/easy to guess passwords, such as words found in a dictionary, then the hash you use is irrelevant. If you use g

Re: passwords in perl: crypt() vs mds5_hex()

2005-05-03 Thread John W. Krahn
JupiterHost.Net wrote: Hello list, Hello, I'm working on a script that manages passwords in a database. Does anyone see any benefits/downfalls [in]securities of using crypt() vs. an MD5 sum via Digest::MD5? Like so: if(crypt($mypass, $crypted_original_pass) eq $crypted_original_pass) { ... vs. us