[geeks] Encrypted hash question

Jonathan C. Patschke jp at celestrion.net
Wed Jun 16 13:11:14 CDT 2004


On Wed, 16 Jun 2004, Bill Bradford wrote:

> If I've got a mysqldump of the entire mysql installation on that
> box, how would you go around finding out what hash method its using?
> Is that possible?

All we can do is guess.  The reason passwd files use % and $ and a bunch
of other characters to indicate hash type is because hashed data doesn't
really have a signature.  All we can assume is that they're either
hashed or DES-encrypted (possibly 3DES-encrypted?) and that the first N
characters is the salt.

Or it's possible that the application uses its own custom encryption/
hashing algorithm.  Is the application documented?

-- 
Jonathan Patschke )"We're Germans and we use Unix.  That's a combination
Elgin, TX        (  of two demographic groups known to have no sense of
USA               ) humour whatsoever." - Hanno Mueller in de.c.o.u.p



More information about the geeks mailing list