Re: Why SHA256+salt authentication ?
Sergei Golubchik <[email protected]>
| Newsgroups | gmane.comp.db.mysql.devel |
|---|---|
| Message-ID | <[email protected]> |
Hi, Kristofer! On May 27, Kristofer Pettersson wrote: > Sergei Golubchik skrev 2011-05-27 11:24: > > Just curious, why do you guys want new authentication plugin > > that uses sha256 and salt? > > > > Was the current (double SHA2) security found flawed? > > There is no evidence that it is flawed and there is no evidence of > successful cryptographic attacks. I see. Good to know. > > Or you just like it salted? > > Yes. It is suppose to make it more difficult to construct MySQL > specific rainbow tables. Agree. We even tried to use salted hashes once, but had to revert it. I hope you will be more successfull at it. Regards, Sergei -- MySQL Internals Mailing List For list archives: http://lists.mysql.com/internals To unsubscribe: http://lists.mysql.com/[email protected]