The Digest family is probably what you want; Digest::SHA1. The algorithms are supported in all the DBs too so it's easy to validate/store.
perl -MDigest::SHA1 -le 'print Digest::SHA1::sha1_hex(shift)' s3cr3t 25ab86bed149ca6ca9c1c0d5db7c9a91388ddeab perl -MDigest::SHA1 -le 'print Digest::SHA1::sha1_hex(shift)' s3cr3ts 0b8afdce3abe965be751e15143604eb17ee1290e
Be aware that there are efforts to generate look-up tables for these so you still need to enforce prohibitions against the usual problematic/weak passwords (dictionary words, sequences, etc). The sha for "password" for example, 5baa61e4c9b93f3f0682250b6cf8331b7ee68fd8, has 681 hits on Google. And 682 come reindex time. :)
In reply to Re: Storing encrypted passwords and validating
by Your Mother
in thread Storing encrypted passwords and validating
by zerohero
| For: | Use: | ||
| & | & | ||
| < | < | ||
| > | > | ||
| [ | [ | ||
| ] | ] |