Velocity Reviews - Computer Hardware Reviews

Velocity Reviews > Newsgroups > Programming > ASP .Net > ASP .Net Security > using md5 but want sha-1

Reply
Thread Tools

using md5 but want sha-1

 
 
Frank
Guest
Posts: n/a
 
      01-31-2006
Hi,
I was reading that md5 is not that secure and that sha-1 or whilpool or
ripemd-160 were better solutions. I'm using asp.net and I want to encrypt the
password. Where can I find a sample code for that with sha-1. I can't seem to
find one.

Thanks
Francisco

 
Reply With Quote
 
 
 
 
Dominick Baier [DevelopMentor]
Guest
Posts: n/a
 
      01-31-2006
Hi,

first of all - SHA1 is a hashing algorithm - no encryption. Hashing is a
non-reversible process, which is fine for passwords.

The corresponding class is called SHA1Managed - i would recommend moving
to SHA256Managed if you can.

Both support a ComputeHash method that takes a byte[] and returns a byte[].

Especially for passwords i would recommend using PasswordDeriveBytes (1.1)
or Rfc2898DeriveBytes (2.0).

have a look at them in the docs - if you have further questions - feel free
to ask.

---------------------------------------
Dominick Baier - DevelopMentor
http://www.leastprivilege.com

> Hi,
> I was reading that md5 is not that secure and that sha-1 or
> whilpool or
> ripemd-160 were better solutions. I'm using asp.net and I want to
> encrypt the
> password. Where can I find a sample code for that with sha-1. I can't
> seem to find one.
>
> Thanks
> Francisc



 
Reply With Quote
 
 
 
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
create a md5 / md5 passwd with a salt Peter Woodsky Ruby 6 11-21-2008 09:08 AM
md5 from python different then md5 from command line ursache.marius@gmail.com Python 9 05-07-2006 11:49 PM
Want to call jscript "confirm" box from VB.NET, but NOT from a but =?Utf-8?B?SlQ=?= ASP .Net 0 03-21-2006 12:14 AM
Digest MD5 authentication over using ZSI trapeze.jsg@gmail.com Python 1 09-21-2005 08:26 AM
I remember someone asking about an MD5 javascript: http://pajhome.org.uk/crypt/md5/ Mozzie \( v \) Javascript 0 07-12-2004 01:06 PM



Advertisments