not yet. i was thinking that somehow the input was corrupted and the ->new method is supposed to reset the object. i don't think that'll fix it, but i'm going to try it anyway. thanks for the suggestion.
-----Original Message----- From: Foo Ji-Haw [mailto:[EMAIL PROTECTED] Sent: Wed 11/16/2005 9:38 PM To: Wiswell, Virginia Cc: [email protected] Subject: Re: Digest::SHA1 weirdness I've not had much problems with the digest, even on mp2. This is a wild shot, but have you tried the OO version of the digest: $sha1 = Digest::SHA1->new; $sha1->add($data); $digest = $sha1->hexdigest; Wiswell, Virginia wrote: >Has anyone else ever experienced inconsistencies in digest creation >using the same plaintext? I am encrypting passwords with Digest::SHA1's >sha1_hex function and storing them in a db. When someone logs in, I take >the password, encrypt it the same way and then compare it with the >stored digest. After a few days, Digest::SHA1 starts creating a >different digest for the identical password. Needless to say, this makes >my login process unusable. > >I am using this in a web app, but I don't see this as a web problem: >Win2k, IIS 5, ASP using perlscript. The code below is in a module I >created. It used to work fine a year or two ago. Windows was recently >patched, but I don't see how that could affect this. > >My code: > >sub compareDigest >{ > ($vi_acct,$vi_data)= @_; > > use Digest::SHA1('sha1_hex'); > $vi_digest = sha1_hex($vi_data); > > $sth = $dbh->prepare( qq{ SELECT id, digest FROM mytable > WHERE id = '$vi_acct' AND digest = '$vi_digest' } ); > > $sth->execute(); >... >--------------- this is how I initially create the digest to save in the >db >sub createDigest >{ > ($dp_acct,$dp_data)= @_; > > use Digest::SHA1('sha1_hex'); > > $dp_digest = sha1_hex($dp_data); > > $sth = $dbh->prepare(qq{ INSERT INTO mytable (id, digest) VALUES >('$dp_acct', '$dp_digest')} ); > $sth->execute(); >... > >Truly baffled, > >virginia > >_______________________________________________ >Perl-Win32-Users mailing list >[email protected] >To unsubscribe: http://listserv.ActiveState.com/mailman/mysubs > > _______________________________________________ Perl-Win32-Users mailing list [email protected] To unsubscribe: http://listserv.ActiveState.com/mailman/mysubs
