MD5的安全性好吗？ [英] MD5 security is fine?

问题描述

在编码时，我可能很新，所以也许我错过了md5的这一点。
但是从我经历的MD5加密是每个单词都是静态的。通过静态我的意思是你会总是找到相同的结果，例如md5（hello）。这使我认为使用图书馆是高度可逆的。

如果md5（hello）被分配了一个数字（例如5），并且字符串例如

xbuIdSjsdsjsd44s64sd是它的加密。并且等于5
，但如果
sfoiefef465f4ze4f6fe也是其加密。并且也等于5

因为数学计算都结束相同的结果。那会是动态加密？

我想，但我告诉你，我是一个新手，所有这些只是问题，打扰我，
我认为有权访问数据库md5的密码的人可以通过测试单词并将它们放在库中来轻松地将其翻转。

你认为谁是谁？
，有没有替代md5？

感谢任何帮助或启发

解决方案

这些确实是合法的问题。您可能会发现以下有趣的文章：

• 彩虹表


• Salt

但是MD5被安全专业人员认定为破损。这取决于您的要求是否完全符合：MD5可能适合，但更安全的散列如 SHA-2家族可能是一个更明智的选择，甚至关键加强技术，如 PBKDF2 （如 CodeInChaos建议）。

请注意，您单独选择散列算法不能单独考虑安全或不安全。重要的是以经过验证的经过验证的方式使用哈希算法。

Im new at coding so Maybe I've missed the point of what md5 is about. But from what' i've experienced MD5 encryption is "static" for each word. By static i mean you will always find the same result for example md5("hello"). And this makes me think that is is highly reversible using a library.

What if md5("hello") was assigned a number (example 5), and the string for example

xbuIdSjsdsjsd44s64sd was its encryption. and was equal to 5 but what if sfoiefef465f4ze4f6fe was also its encryption. and was also equal to 5

Because both for a mathematical calculation ends to the same result. That would be dynamic encryption?

I think, but I tell you I'm a newb at all this, so those are just questions that bother me, I think that people who have access to the database md5's password, can reverse them easily by testing words and stocking them as a library.

what do you think guys? and is there an alternative to md5?

thank for any help or enlightnment

解决方案

These are indeed legitimate concerns. You might find the following articles interesting:

• Rainbow table
• Salt

But MD5 is considered "broken" by security professionals. It depends on exactly what your requirements are: MD5 might be suitable, but more secure hashes like the SHA-2 family would probably be a wiser choice, or even key-strengthening techniques such as PBKDF2 (as CodeInChaos suggests).

Note that your choice of hash algorithm alone can't be considered either secure or insecure in isolation. It's important to use the hash algorithm in a proven, tried-and-tested way.

这篇关于MD5的安全性好吗？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！