Re: A question about passwords and login/authentication

On Wed, Mar 16, 2005 at 10:28:16AM +1100, Steffen Kluge wrote:
> On Tue, 2005-03-15 at 14:53 +0100, Pavol Luptak wrote:
> > Try blowfish instead MD5
> 
> I feel a bit uneasy about using symmetric ciphers (like DES or blowfish)
> for password encryption. I'm not a crypto guy, but doesn't this bring
> about the whole bloody key management can of worms?

No, because the cipher isn't used to *encrypt* the password, it's used
to *hash* the password.