Title says is it all. Is there any real difference between the two?
views:
81answers:
1
+3
A:
MD5 has some known vulnerabilities, whereas SHA-256 does not. Because of this I would suggest SHA-256. Here's a link that describes why. Although I have no idea if they are actually affiliated with the US Department of Homeland Security, the site does explain what I mean.
The Wikipedia article on MD5 also discuses the weaknesses.
Chris Thompson
2010-09-22 03:01:34
great link...thanks.
HDave
2010-09-22 03:10:15
Happy to help :-) oddly enough the official spring security book that was released for version 3 not long ago doesn't mention this at all and still advocates the use of MD5
Chris Thompson
2010-09-22 15:06:24