Re: md5 encryption

> simon wrote:
>
>> He was asking about passwords. Almost every site that is md5() only
>> compare the hash as they cannot compare the string.
>> So, technically, given a hash key you can get a string. In turn that
>> string would match the hash and give you access.
>
> I don't quite agree. If the hash isn't generated by the string itsself,
> but
> by a slightly alternated version of it, like md5(string.'extra'), the
> attacker would find a string y with md5(y)==hash, but not one with
> md5(y.'extra')==hash.
> I think this is a very simple way to make a authentication routine more
> secure.

Yes, but that method is not used by many, (open source), applications.

Simon


.

Relevant Pages

  • Re: How to write a diff in VB6 for comparing two xml files?
    ... No, the best you could do is to read both into string and use StrCompbut it's inefficient and, but using the hash ... Private Declare Function CryptAcquireContext Lib "AdvAPI32.dll" Alias _ ... Dim HashAAs Byte, HashLenA As Long ...
    (microsoft.public.vb.general.discussion)
  • Re: How do I can check a password Hash in WSE 2.0
    ... The SHA-1 hash of the password is sent in the SOAP message. ... WSE calls the AuthenticateToken method of the class deriving ... > private string HashPassword (string nnonce, DateTime nfecha, string ... and then compare your computed hash against the supplied one. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Is String Hashing Effective in String comparisons
    ... string class more efficient. ... overhead of continuing to compare if a character is different. ... in the hash functions i have encountered we loop through all the ... computing the hash for a string of length L takes Htime units. ...
    (comp.programming)
  • Re: something like switch in c
    ... >> straightforward string comparisions. ... > inner table size and/or add symbols to expand the hash. ... It all depends on the empirical pattern of the actual keys. ... The value of the random number generator is UNCHANGED on ...
    (comp.programming)
  • Re: How to make PKCS#7 signature using CryptoAPI?
    ... Those MSDN samples hash a string PLUS the null byte (so that it ... I tried your sample and had no problem verifying with openssl (after I added ... functions (including CryptSignMessage). ...
    (microsoft.public.platformsdk.security)