2

I use a php script that hashes passwords using php's crypt and uses SHA512, however when I try to check if SHA512 is set I get the above error. Of course I know WHY I get this error.. php is missing some dependency. I just don't know what that dependency is.

Can anyone please tell me what I need to install (on a Ubuntu server) to be able to use SHA512 in PHP ?

Thanks!

Naatan
  • 3,424
  • 4
  • 32
  • 51

3 Answers3

2

The php docs say that built-in support for SHA-256 and SHA-512 was added in PHP 5.3.2. If you use any earlier versions of PHP, it relies on implementations of those algorithms provided by your system, which apparently yours does not have.

simshaun
  • 21,263
  • 1
  • 57
  • 73
0

Make sure you have newest version of PHP5 and install mcrypt - also contains alot of other encryption methods like rinjdael (AES)

Jack
  • 1,386
  • 1
  • 8
  • 17
0

Bottom line, you should be using mcrypt, not SHA512 or any md5 style hasher. It's too easy to brute force decrypt them. There is a ton of good reference at http://www.php.net/manual/en/function.mcrypt-generic.php and all over google. Below is an example of a 3DES hashed URL using the reference function urlsafe_b64encode from http://www.php.net/manual/en/function.mcrypt-generic.php#71135

$key = "what can i tell you";
$request = http_build_query($_REQUEST);
$request_enc = urlencode(urlsafe_b64encode(mcrypt_ecb(MCRYPT_3DES, $key, $request, MCRYPT_ENCRYPT)));
$url = "http://localhost/takemerightthere/".$request_enc;
huntar
  • 1,072
  • 11
  • 9
  • That doesn't really seem to apply to passwords though, which are not supposed to be decryptable. – Naatan Dec 02 '10 at 20:38