Hi,

Jannetta S Steyn wrote:
>> It doesn't matter what gets stored as long as the
>> decrypted value matches the password.
> 
> This part of what you said puzzles me. Why would you want to decrypt the 
> password and
> isn't the point of md5 and DES that you don't decrypt the password. Usually 
> the
> passwords are compared in their encrypted form. That's the whole idea of a 
> message
> digest isn't it to get a unique signature for a message and to make it near 
> impossible
> to retrieve the message from the signature again.

You're talking about the differences between hashing and encryption /
decryption.  MD5 is a hashing algorithm, DES is an encryption /
decryption algorithm.  See:

http://en.wikipedia.org/wiki/Cryptographic_hash_function
http://en.wikipedia.org/wiki/Encryption

HTH,


                                Neil.

-- 
Neil Hillard                    [EMAIL PROTECTED]
AgustaWestland                  http://www.whl.co.uk/

Disclaimer: This message does not necessarily reflect the
            views of Westland Helicopters Ltd.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to