Home > database >  Why now in the database password stored through the MD5, why not use SHA256, 384, etc.
Why now in the database password stored through the MD5, why not use SHA256, 384, etc.

Time:09-22

MD5 is not has been in shandong, implements the feasible reverse engineer, a professor at the university in the field is no longer used, but on the database password management is still in using this method, why not use the computing resources with forensic field cannot decrypt the sha256 forms, such as
Use MD5, after the database is scored by decryption can easily get password proclaimed in writing, this is not a window?

CodePudding user response:

Can also be set using the SHA - 256 in MySQL

CodePudding user response:

MD5 is no longer safe, now has can crack website,
Now suggest using AES_ENCRYPT and AES_DECRYPT,
As to how to use these two things, you get to check the Internet,
The key is to protect the secret key,

CodePudding user response:

reference 1st floor by the stars of a cold response:
is also using the SHA - 256 can be set in the MySQL
oh oh ok thank you

CodePudding user response:

refer to the second floor AHUA1001 response:
MD5 is no longer secure, now have can crack website,
Now suggest using AES_ENCRYPT and AES_DECRYPT,
As to how to use these two things, you get to check the Internet,
The key is to protect the secret key,
uh-huh good thank you, that if you use other forms of encryption how to crack

CodePudding user response:

reference 4 floor qq_39494095 response:
Quote: refer to the second floor AHUA1001 response:
MD5 is no longer safe, now have can crack website,
Now suggest using AES_ENCRYPT and AES_DECRYPT,
As to how to use these two things, you get to check the Internet,
The key is to protect the secret key,
uh-huh good thank you, that if you use other forms of encryption should be how to decipher

Just send you two things, one is encrypted, one is the decryption, both encryption and decryption requires you to define a secret key, otherwise can't operate,
You baidu AES_ENCRYPT and AES_DECRYPT can directly,