<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.6000.16608" name=GENERATOR></HEAD>
<BODY>
<DIV><FONT face=&#26032;&#32048;&#26126;&#39636; size=2><SPAN class=960275805-10032008>Hi 
All:</SPAN></FONT></DIV>
<DIV><FONT face=&#26032;&#32048;&#26126;&#39636; size=2><SPAN 
class=960275805-10032008></SPAN></FONT>&nbsp;</DIV>
<DIV><FONT face=&#26032;&#32048;&#26126;&#39636; size=2><SPAN class=960275805-10032008>I plan to upgrade our 
password algorithm to salted MD5, take the following for 
eaxample:</SPAN></FONT></DIV>
<DIV><FONT face=&#26032;&#32048;&#26126;&#39636; size=2><SPAN 
class=960275805-10032008></SPAN></FONT>&nbsp;</DIV>
<DIV><FONT face=&#26032;&#32048;&#26126;&#39636; size=2><SPAN class=960275805-10032008>sha1(md5($password) + 
user_defined_private_key);</SPAN></FONT></DIV>
<DIV><FONT face=&#26032;&#32048;&#26126;&#39636; size=2><SPAN 
class=960275805-10032008></SPAN></FONT>&nbsp;</DIV>
<DIV><FONT face=&#26032;&#32048;&#26126;&#39636; size=2><SPAN class=960275805-10032008>I will also remain an 
option in lifetype admin panel for user to use the old MD5 way to keep 
compatability.</SPAN></FONT></DIV>
<DIV><FONT face=&#26032;&#32048;&#26126;&#39636; size=2><SPAN 
class=960275805-10032008></SPAN></FONT>&nbsp;</DIV>
<DIV><FONT face=&#26032;&#32048;&#26126;&#39636; size=2><SPAN class=960275805-10032008>If&nbsp;we use the 
algorithm above, It is also possible to convert the old hashed password to new 
hased password.</SPAN></FONT></DIV>
<DIV><FONT face=&#26032;&#32048;&#26126;&#39636; size=2><SPAN 
class=960275805-10032008></SPAN></FONT>&nbsp;</DIV>
<DIV><FONT face=&#26032;&#32048;&#26126;&#39636; size=2><SPAN class=960275805-10032008>How do you 
think?</SPAN></FONT></DIV>
<DIV><FONT face=&#26032;&#32048;&#26126;&#39636; size=2><SPAN 
class=960275805-10032008></SPAN></FONT>&nbsp;</DIV>
<DIV><FONT face=&#26032;&#32048;&#26126;&#39636; size=2><SPAN class=960275805-10032008><A 
href="http://kuza55.blogspot.com/2006/10/online-reverse-lookup-tables-for.html">http://kuza55.blogspot.com/2006/10/online-reverse-lookup-tables-for.html</A></SPAN></FONT></DIV>
<DIV><FONT face=&#26032;&#32048;&#26126;&#39636; size=2><SPAN 
class=960275805-10032008></SPAN></FONT>&nbsp;</DIV>
<DIV><FONT face=&#26032;&#32048;&#26126;&#39636; size=2><SPAN class=960275805-10032008>These kind of online 
reverse lookup table sites making the MD5 only algorithm more 
dangerous.</SPAN></FONT></DIV>
<DIV><FONT face=&#26032;&#32048;&#26126;&#39636; size=2><SPAN 
class=960275805-10032008></SPAN></FONT>&nbsp;</DIV>
<DIV><FONT face=&#26032;&#32048;&#26126;&#39636; size=2><SPAN 
class=960275805-10032008>Mark</SPAN></FONT></DIV>
<DIV><FONT face=&#26032;&#32048;&#26126;&#39636; size=2><SPAN 
class=960275805-10032008></SPAN></FONT>&nbsp;</DIV>
<DIV><FONT face=&#26032;&#32048;&#26126;&#39636; size=2><SPAN 
class=960275805-10032008></SPAN></FONT>&nbsp;</DIV></BODY></HTML>