MD5 Password Encryption Question

 
Post new topic   Reply to topic    Aprelium Forum Index -> General Questions
View previous topic :: View next topic  
Author Message
robert2040
-


Joined: 23 Dec 2003
Posts: 1

PostPosted: Fri Dec 26, 2003 11:22 am    Post subject: MD5 Password Encryption Question Reply with quote

I read the posts about Abyss' use of MD5 for encrypting user's passwords in the config file. However, what I've read does not match what I'm seeing in the resultant config file.

The way I understand it, for username "bob" and password "dylan" the MD5 encryption should take as input the string "bob:dylan" (without quotes). Is this correct? The result of that MD5 calculation (using two separate standalone MD5 utilities) with "bob:dylan" (without quotes) as input is

cf7f08062f2b55bd2459a77f7a60f7df

However, if I create such a username and password in Abyss and later examine the Abyss conf file, the encyrpted password is different from what I get with the MD5 utilites. Abyss gives

158dfeee537600f8f7d8748cf7275658

Please explain what I'm doing wrong. Thank you.
Back to top View user's profile Send private message
aprelium
-


Joined: 22 Mar 2002
Posts: 6800

PostPosted: Sun Dec 28, 2003 5:49 pm    Post subject: Re: MD5 Password Encryption Question Reply with quote

robert2040,

You're right. We must check our previous posts because there was something missing. To get the same result with bob:dylan, you must run (in PHP):

Code:

echo md5(base64_encode("bob:dylan"));


MD5 must be applied after the base64 encoding.
_________________
Support Team
Aprelium - http://www.aprelium.com
Back to top View user's profile Send private message Send e-mail
derek
-


Joined: 10 Oct 2003
Posts: 14

PostPosted: Mon Dec 29, 2003 12:23 am    Post subject: Reply with quote

This still is in error, at least with perl. I base64 encoded the value "user:password" and then md5 encoded this result, and it still does not match the abyss.conf file. ????
Back to top View user's profile Send private message
aprelium
-


Joined: 22 Mar 2002
Posts: 6800

PostPosted: Tue Dec 30, 2003 1:14 pm    Post subject: Reply with quote

derek,

Can you give it a try with PHP?
_________________
Support Team
Aprelium - http://www.aprelium.com
Back to top View user's profile Send private message Send e-mail
whackaxe
-


Joined: 28 Jun 2003
Posts: 90

PostPosted: Tue Dec 30, 2003 11:38 pm    Post subject: Reply with quote

works in php.
Back to top View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    Aprelium Forum Index -> General Questions All times are GMT + 1 Hour
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB phpBB Group