| View previous topic :: View next topic | 
	
	
		| Author | Message | 
	
		| robert2040 -
 
 
 Joined: 23 Dec 2003
 Posts: 1
 
 
 | 
			
				|  Posted: Fri Dec 26, 2003 11:22 am    Post subject: MD5 Password Encryption Question |   |  
				| 
 |  
				| I read the posts about Abyss' use of MD5 for encrypting user's passwords in the config file.  However, what I've read does not match what I'm seeing in the resultant config file. 
 The way I understand it, for username "bob" and password "dylan" the MD5 encryption should take as input the string "bob:dylan"  (without quotes).  Is this correct?   The result of that MD5 calculation (using two separate standalone MD5 utilities) with "bob:dylan" (without quotes) as input is
 
 cf7f08062f2b55bd2459a77f7a60f7df
 
 However, if I create such a username and password in Abyss and later examine the Abyss conf file, the encyrpted password is different from what I get with the MD5 utilites.  Abyss gives
 
 158dfeee537600f8f7d8748cf7275658
 
 Please explain what I'm doing wrong.  Thank you.
 |  | 
	
		| Back to top |     | 
	
		|  | 
	
		| aprelium -
 
 
 Joined: 22 Mar 2002
 Posts: 6800
 
 
 | 
			
				|  Posted: Sun Dec 28, 2003 5:49 pm    Post subject: Re: MD5 Password Encryption Question |   |  
				| 
 |  
				| robert2040, 
 You're right. We must check our previous posts because there was something missing. To get the same result with bob:dylan, you must run (in PHP):
 
 
  	  | Code: |  	  | echo md5(base64_encode("bob:dylan"));
 
 | 
 
 MD5 must be applied after the base64 encoding.
 _________________
 Support Team
 Aprelium - http://www.aprelium.com
 |  | 
	
		| Back to top |       | 
	
		|  | 
	
		| derek -
 
 
 Joined: 10 Oct 2003
 Posts: 14
 
 
 | 
			
				|  Posted: Mon Dec 29, 2003 12:23 am    Post subject: |   |  
				| 
 |  
				| This still is in error, at least with perl. I base64 encoded the value "user:password" and then md5 encoded this result, and it still does not match the abyss.conf file. ???? |  | 
	
		| Back to top |     | 
	
		|  | 
	
		| aprelium -
 
 
 Joined: 22 Mar 2002
 Posts: 6800
 
 
 | 
			
				|  Posted: Tue Dec 30, 2003 1:14 pm    Post subject: |   |  
				| 
 |  
				| derek, 
 Can you give it a try with PHP?
 _________________
 Support Team
 Aprelium - http://www.aprelium.com
 |  | 
	
		| Back to top |       | 
	
		|  | 
	
		| whackaxe -
 
 
 Joined: 28 Jun 2003
 Posts: 90
 
 
 | 
			
				|  Posted: Tue Dec 30, 2003 11:38 pm    Post subject: |   |  
				| 
 |  
				| works in php. |  | 
	
		| Back to top |     | 
	
		|  | 
	
		|  |