Page 1 of 1
md5 security
Posted: Fri Jul 16, 2004 5:51 pm
by thefool
Hi!
can MD5 be reversed?
Many software products uses md5 as password hashing.
But can it be reversed, or is it 100% secure to use md5 for checking a password?
Posted: Fri Jul 16, 2004 6:35 pm
by blueznl
afaik md5 cannot be reversed, however md5 is length dependent, ie. brute force on short passwords will quickly yield results
Posted: Fri Jul 16, 2004 7:07 pm
by thefool
thanks
Posted: Fri Jul 16, 2004 7:08 pm
by Karbon
Yep MD5 is a one-way hash.
Posted: Fri Jul 16, 2004 7:10 pm
by thefool
ok. So its very secure for testing passwords.
Isnt linux using it for password security too?
Posted: Fri Jul 16, 2004 7:13 pm
by Proteus
Linux uses DES with a 2-char key. (According to the PB helpfile...)
Posted: Fri Jul 16, 2004 7:14 pm
by Karbon
It depends on what distribution of Linux you use. I think most use MD5 verses DES these days..
Posted: Fri Jul 16, 2004 7:17 pm
by thefool
ok. Thanks
Posted: Sun Jul 18, 2004 6:23 am
by kake26
Yes any sane linux distro will use MD5 and it will shadow the password.