Hello
MD5 and SHA1 are hash algorithms. Unlike crypt, they need no salt at all.
Hence the encoded result is always the same if your input data has not
changed.
I don't know what fred's password /try fred/. Anyway MD5 and SHA1 can give
you the hash in a binary or in a hex. form. The encoded password is in hex
form you mentioned.
If you are not sure, MD5 provides 128 bit hash, SHA1 gives 160 bit length
hash.
If you need more details I am pretty sure, you can find some RFC's somewhere.
Bye,
Janos SUTO
On Mon, 23 Oct 2000, Carles Xavier Munyoz [iso-8859-1] Bald� wrote:
> Hi,
> I'm using a DBM file to store the password of my dialup users.
> I would like to use the MD5 and SHA password encription mecanism but I
> don't know the format used to store the message digest (obtained using
> MD5 or SHA) in the DBM users data base.
>
> I have been reading the manual (section 13.1.1) and in one of the
> examples, the MD5 for the string "fred" is
> "CTpht$Obus9PLSMst1TDou.mN5bk0", but when I use the MD5 message digest
> algoritm over the string "fred" I obtain a binary stream of bytes. If I
> use the base64 encode algoritm, I obtain an ASCII string different from
> the one showed above.
> The same thing happens if I use the SHA message digest algortim.
> What is the format used by Radiator to store the encrytped passwords
> obtained using the MD5 or SHA message digest algoritms ?
> Uses some kind of random generated "salt" like in the crypt() function
> used in UNIX to obtain the encrypted passwords stored in the
> /etc/password file ?
>
> Greetings
> ---
> Carles Xavier Munyoz Bald� / [EMAIL PROTECTED]
> Wanadoo Espa�a
> Dpto. Sistemas / System Department
> Tel: +34 96 5040000 Ext. 40046 - Fax: +34 96 5040047
> http://www.wanadoo.es/
> ---
>
> ===
> Archive at http://www.starport.net/~radiator/
> Announcements on [EMAIL PROTECTED]
> To unsubscribe, email '[EMAIL PROTECTED]' with
> 'unsubscribe radiator' in the body of the message.
>
===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
