On Wed, Nov 16, 2005 at 10:29:09AM -0500 I heard the voice of Tom Lane, and lo! it spake thus: > > The existence of this algorithm is disturbing, since it implies that > MD5 is weaker than people thought, It occurs to me that, controlling everything that would be poking into that part of the database, it would be possible to store the password with several DIFFERENT hash algorithms, which would save us in the future from any of them being easily crackable (or even ALL of them, unless you can somehow create a collision across them all simultaneously). It seems that even with 2 or 3 weak hashes, that might be safer long-term than with just 1 strong hash. I s'pose it would add a little cost to the connection-establishing process... -- Matthew Fuller (MF4839) | fullermd@xxxxxxxxxxxxxxx Systems/Network Administrator | http://www.over-yonder.net/~fullermd/ On the Internet, nobody can hear you scream. ---------------------------(end of broadcast)--------------------------- TIP 3: Have you checked our extensive FAQ? http://www.postgresql.org/docs/faq
