encrypt method=APOP broken or just not enough docs? - was MD5encryption

This WebDNA talk-list message is from

2003


It keeps the original formatting.
numero = 47384
interpreted = N
texte = >If you figure this out I'd really like to know myself. I use a >script to change the >user >information for Apache, but I use the WebCat DB to keep track of >the information >first then call the script from a tpl. > >I could dig up my method for you, but I would really like to see >what you come up >with. > >Matt Perosi >NJ-Singles.com >It appears that the APOP encryption method may be broken, at least in webcat 4.5.1/OSX. To borrow some code from Brian's recent excellent explanation of encryption:[text]tIn=blahblah[/text] [text]tEn=[url][encrypt method=APOP&seed=ABC123][tIn][/encrypt][/url][/text] [text]tDe=[decrypt method=APOP&seed=ABC123][unurl][tEn][/unurl][/decrypt][/text] tIn=[tIn]
tEn=[tEn]
tDe=[tDe]
[if [url][tIn][/url]=[url][tDe][/url]][then]Good[/then][else]Bad[/else][/if]
This always returns Bad, no matter what the input or seed. Does APOP have a special seed like Cybercash encryption does? The docs are a little thin on this point...I'm using WC4.5.1 on OSX 10.2.3.-Dale------------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://webdna.smithmicro.com/ Associated Messages, from the most recent to the oldest:

    
  1. encrypt method=APOP broken or just not enough docs? - was MD5encryption (Dale LaFountain 2003)
>If you figure this out I'd really like to know myself. I use a >script to change the >user >information for Apache, but I use the WebCat DB to keep track of >the information >first then call the script from a tpl. > >I could dig up my method for you, but I would really like to see >what you come up >with. > >Matt Perosi >NJ-Singles.com >It appears that the APOP encryption method may be broken, at least in webcat 4.5.1/OSX. To borrow some code from Brian's recent excellent explanation of encryption:[text]tIn=blahblah[/text] [text]tEn=[url][encrypt method=APOP&seed=ABC123][tIn][/encrypt][/url][/text] [text]tDe=[decrypt method=APOP&seed=ABC123][unurl][tEn][/unurl][/decrypt][/text] tIn=[tIn]
tEn=[tEn]
tDe=[tDe]
[if [url][tIn][/url]=[url][tDe][/url]][then]Good[/then][else]Bad[/else][/if]
This always returns Bad, no matter what the input or seed. Does APOP have a special seed like Cybercash encryption does? The docs are a little thin on this point...I'm using WC4.5.1 on OSX 10.2.3.-Dale------------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://webdna.smithmicro.com/ Dale LaFountain

DOWNLOAD WEBDNA NOW!

Top Articles:

Talk List

The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...

Related Readings:

Frames and WebCat (1997) Date or time comparisons have bugs ... (1998) [OT] authenticate with email server (2004) Kaaaaahhhhhhhnnnnnnn! (1997) OT Cookie limit (2001) Great product and great job ! (1997) PCS Emailer's role ? (1997) WebCat2 - many [carts] on one template page? (1997) If Empty ? (1997) Forms Search Questions (1997) Add a field to the error log? (1997) IIS Brain Dead (1998) More on [purchase] (1998) Searching multiple Databases (1997) duplicate cart numbers (2002) [format 40s]text[/format] doesn't work (1997) [OT] Shining Examples (2007) A little syntax help (1997) Robert Minor duplicate mail (1997) splitting numbers in webDNA? (1997)