Re: Postgres: pg_hba.conf, md5, pg_shadow, encrypted passwords

From: Bruno Wolff III <bruno(at)wolff(dot)to>
To: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, "Jim C(dot) Nasby" <decibel(at)decibel(dot)org>, pgsql-hackers(at)postgresql(dot)org, bugtraq(at)securityfocus(dot)com
Subject: Re: Postgres: pg_hba.conf, md5, pg_shadow, encrypted passwords
Date: 2005-04-21 22:27:16
Message-ID: 20050421222716.GA2730@wolff.to
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

On Wed, Apr 20, 2005 at 22:27:01 -0400,
Stephen Frost <sfrost(at)snowman(dot)net> wrote:
>
> SHA2 would also be nice.

I think the new hash functions are called SHA256 and SHA512.
For Postgres' purposes the recent weaknesses found in SHA1 and MD5
aren't a big deal.

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Stephen Frost 2005-04-22 00:00:06 Re: Postgres: pg_hba.conf, md5, pg_shadow, encrypted passwords
Previous Message Bruce Momjian 2005-04-21 22:26:18 Re: Postgres: pg_hba.conf, md5, pg_shadow, encrypted passwords