Re: How to encrypt the data of a field

Tech-Archive recommends: Speed Up your PC by fixing your registry

From: Steve Kass (skass_at_drew.edu)
Date: 11/15/04 

Date: Sun, 14 Nov 2004 23:21:36 -0500

David,

  "No way to reconstruct the original data" assumes there is no context
for the original data, but that is untrue for most of the world's
passwords. If a password is a name or word in any dictionary or
magazine, or a combination of two simple words or names, possibly with a
digit appended, the password is trivial to find from the hash. If the
hash is "plain", it's as easy as a lookup in a table of pre-computed
hashes (those are easy to find or build for SHA-1, MD5, or other
well-known hash functions - you could keep a few on your keychain). If
the hash is "salted," and the salt is known or easy to spot, it's only a
little harder - you need to hash a few million possibilities and see if
you get the hash in hand.

Steve Kass
Drew University

David Gugick wrote:

> ad wrote:
>
>> Thank,
>> What is the difference between hash and encrypted password?
>>
>
> A has is one-way; meaning, there is no way to reconstruct the original
> data from the hash. En encrypted password can be decrypted. That's not
> to say that a hash is completely secure.
>

Relevant Pages

  • Re: How do I can check a password Hash in WSE 2.0
    ... You need to have the original data, ... can perform the same hashing algorithm against the data, ... hash, and then compare your computed hash against the supplied one. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Convert struct to char* in C
    ... struct cert { ... int node_ca; ... hash structur and crypter the hash result with a public key. ... The purpose of computing a secure hash and signing it is to effectively prove that the key holder signed the original data. ...
    (comp.programming)
  • Re: YAML::load help
    ... The difference between the original hash and the hash loaded from the ... yml file is that the original data shows the hash key, ... The .yml file shows that there is a!ruby/struct, but after the load, ...
    (comp.lang.ruby)
  • Re: hash-password length relation (was: Password security)
    ... >> Does the length of the encrypted password grow with the length of the ... > Traditional DES always produces a 13-byte hash. ... Both MD5 and Blowfish use a special prefix to identify the ...
    (FreeBSD-Security)
  • Re: How to encrypt the data of a field
    ... What is the difference between hash and encrypted password? ... for most purposes you are probably better off NOT to store ... Store a secure hash of the password ...
    (microsoft.public.sqlserver.server)