Re: hash function for creating an activation code

[André Gasser <andre.gasser () gmx ch>]

Hi,

From a security perspective I would use SHA-256 since both, SHA-1 and 
MD5 should not be considered "secure" these days. In this case, where 
you are just generating a license file, computing time should not be an 
issue...

just my 0.02

andré

Shreyas Zare wrote:
> Hi,
>
> You can simple use MD5 or SHA1. MD5 is faster than SHA1, but is less
> secure, so if your app is not being deployed in large scale then use
> MD5.
>
> Regards
>
> On Mon, Nov 9, 2009 at 11:50 PM, Ali Asghar Toraby Parizy
> <aliasghar.toraby () gmail com> wrote:
>   
> > hi
> > I want to create a license file for my program
> > I have created a function that extract unique hex number of each network
> > adapters of host computer
> > When activation wizard starts, this unique number has been sent to a server
> > as a request code. Now i need a hash function that mix this number with a
> > user name and return a new code as an activation code to user.
> > So please suggest a hash function
> > request code is a string like this:
> > -------------------
> > "
> > 000272B0002600FFD924114B0008C9A20DE70001027CC602002215FE0E9B005056C0000100=
> > 5056C0000800000000000000E000000000000000E000000000000000E000000000000000E00=
> > 0000000000000E000000000000000E000000000000000E000000000000000E0000000000000=
> > 00E000000000000000E000000000000000E000000000000000E000000000000000E00000000=
> > 0000000E000000000000000E000000000000000E000000000000000E000000000000000E000=
> > 000000000000E000000000000000E000000000000000E000000000000000E00000000000000=
> > 0E000000000000000E000000000000000E000000000000000E000000000000000E000000000=
> > 000000E000000000000000E000000000000000E000000000000000E000000000000000E0000=
> > 00000000000E000000000000000E0"
> > -------------------
> > and a user name may be "aliasghar.toraby () gmail com"
> > thanks for any help
> >     
>
>
>   

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------