Re: Generating unique session ids
| От | Chris Mair |
|---|---|
| Тема | Re: Generating unique session ids |
| Дата | |
| Msg-id | 1154007256.6238.3.camel@dell.home.lan обсуждение исходный текст |
| Ответ на | Re: Generating unique session ids (Tomasz Ostrowski <tometzky@batory.org.pl>) |
| Список | pgsql-general |
> > SELECT md5('secret_salt' || nextval('my_seq')::text)
>
> * When somebody knows md5('secret_salt' || '5') he will be able to
> easily compute
> md5('secret_salt' || '50')
> md5('secret_salt' || '51')
> md5('secret_salt' || '52')
> ...
> md5('secret_salt' || '59')
> md5('secret_salt' || '500')
> md5('secret_salt' || '501')
> ...
> md5('secret_salt' || '[any number starting from 5]').
> Without knowledge of 'secret_salt'. So your proposal is totally
> insecure.
Challenge :)
chris=> select md5('******' || '5');
md5
----------------------------------
7b076f591070f6912e320b95782250ae
(1 row)
I won't tell what '******' was.
Can you send me what md5('******' || '50') will give?
Bye,
Chris.
В списке pgsql-general по дате отправления: