PHP hash comparison flaw is a risk for million users - Reddit
Its just as likely you hash and salt the incoming password and do a select query where the database is doing the comparison, which …
A rare occurrance of the PHP docs actually realizing how bad ... - Reddit
Apr 11, 2016 · By contrast, every cryptographic hash (MD5, SHA-1, SHA-2, etc.) is designed to detect malicious modification of …
hash_init () & co is a clusterfuck : r/lolphp - Reddit
Oct 10, 2020 · 22 votes, 14 comments. here is what a sensible hash_init () implementation would look like: class HashContenxt { …
crc32 ($str) and hash ("crc32",$str) use different algorithms ... - Reddit
Dec 24, 2019 · I'm still trying to figure out the reason why having crc32($str) and hash("crc32", $str) return two …
md5 ('240610708') == md5 ('QNKCDZO') : r/lolphp - Reddit
Jun 10, 2018 · For security related stuff, hash_equals should be used, as it is safe against timing attacks. Of course, md5 should …
Password_verify () always returns true with some hash
Feb 23, 2023 · When passed a correct password and the generated hash from password_hash (), the function will return a boolean …
"The algos Salsa10 and Salsa20 have been removed [from hash
"The algos Salsa10 and Salsa20 have been removed [from hash extension] because they are actually stream ciphers and not hash …
md5 ('240610708') == md5 ('QNKCDZO') : r/lolphp - Reddit
May 4, 2015 · The key point is that to compute an MD5, you have to read the entire file + do some processing to get the hash. You …
"Timing attack safe string comparison", but "When arguments of
If you do a timing attack safe comparison between the strings, then stop once one runs out, you have a timing attack since, again, …
PHP creator: functions were named to fall into length buckets ... - Reddit
Nov 23, 2021 · 9.5K subscribers in the lolphp community. PHP creator: functions were named to fall into length buckets because …