Security Basics mailing list archives

MD5-Hash of a SHA-1-Hash unsecure?


From: "Andre Pawlowski" <sqall () h4des org>
Date: Fri, 05 Dec 2008 09:19:25 +0100

Hey guys,

I've written a program which can store files encrypted ( http://h4des.org/index.php?inhalt=kastalia ). The user enters a password when he wants to encrypt a file. The programm makes a SHA-1-Hash of this password and transfers it from the browser to the server. When the encryption starts, the program makes a MD5-Hash of this SHA-1-Hash for the IV of the blowfish algorithm.

Here is my question: Is it less secure when I make a MD5-Hash of a SHA-1-Hash?

Regards,

--
[] Andre Pawlowski

visit http://h4des.org





Current thread: