1. Encrypt it.Take the md5 of what? If you md5 the ciphertext, an attacker can still flip bits as I described elsewhere in this thread, then recompute the md5. If you md5 the plaintext, that may allow him to launch a dictionary attack. For best results, use a real keyed MAC function.
2. bin2hex/urlencode/uuencode it.
3. take the md5 and append it.
And I thought everybody knew better than to use md5 for new development by now.
In reply to Re^2: Is this a secure way to prevent cookie tampering
by Anonymous Monk
in thread Is this a secure way to prevent cookie tampering
by EvdB
| For: | Use: | ||
| & | & | ||
| < | < | ||
| > | > | ||
| [ | [ | ||
| ] | ] |