Links

Lists

Latest Updates

Ruby On Rails List
Python list
Advanced Java
The JavaScript List
Apache Users
Full Disclosure
Linux Security

Search the archives!


[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Cryptography and Encryption


  • From: rodrigo@xxxxxxxxxxxxxxxx (Rodrigo de Almeida Sodré)
  • Subject: Cryptography and Encryption
  • Date: Tue, 29 Feb 2000 09:54:10 -0300

MD5 is not an encryption algorithm, but a hash (also called one way =
hash
function or digest algorithm) so it should be used only for processing =
the
hash of data, and not for encryption/decryption. This is exactly the
advantage on using a a hash algorithm with passwords.

Although its not recommended for security reasons, it is possible to =
use a
hash algorithm to hide and retrieve hidden information (encrypt/decrypt =
in
other words) with this meta-algorithm:

1. create and initialize (with a seed) a hash object;
2. calculate the hash; (the hash is usualy a byte array)
3. make a XOR operation with the hash block and one data block with, at
maximum, the same size of the hash size;
4. if there is more information, goto 2

Regards

Rodrigo A. Sodr=E9
Analista de Sistemas
F=F3ton Inform=E1tica e Servi=E7os
(061) 328-5060 R:243
rodrigo@xxxxxxxxxxxxxxxx

> -----Original Message-----
> From: Biju Nambisan [mailto:biju.nambisan@xxxxxxxxx]
> Sent: Tuesday, February 29, 2000 8:15 AM
> To: servlet-interest@xxxxxxxxxxxx; java@xxxxxxxx;
> advanced-java@xxxxxxxxxxxxxxxx
> Subject: Cryptography and Encryption
>=20
>=20
>=20
> Hi! All,
>=20
> I am trying to encode the password using the MD5 algorithm thats
> provided with the jdk1.2.We also have a necessity to decrypt the
> password....Can somebody who has worked on this suggest the code that
> goes in for decrypting.(We are interested in using MD5 for=20
> decrypting as
> well)
> Are there any freeware packages that can be imported and used ??
> This is with reference to servlets...
> Please respond ASAP...
>=20
> Thanks in Advance!!
>=20
> Regards,
> Biju
>=20
> ---
> To unsubscribe, mail advanced-java-unsubscribe@xxxxxxxxxxxxxxxx
> To get help, mail advanced-java-help@xxxxxxxxxxxxxxxx
>=20

---
To unsubscribe, mail advanced-java-unsubscribe@xxxxxxxxxxxxxxxx
To get help, mail advanced-java-help@xxxxxxxxxxxxxxxx