> Can anyone explain the difference between MD5 and SHA > (besides 128 vs 160 bits) or point me to a good reason to > use one over > the other? AFAIK MD5 is faster. But SHA-1 is stronger against brute force attacks. It's just a faster implementation. HTH Gerardo Amaya VPN is sponsored by SecurityFocus.com