There is something called md5-crypt, which is standard in shadow utils, and php among others. It uses a salt, just like des-crypt. And your are correct, it seems; it's not part of md5 proper, hence not mentioned in the rfc.


Thomas Mueller wrote:
Hi Paul,


The difference is between md5-digest, and md5-hash. I don't have any detailed knowlegde of the algorithms involved, though.


I searched around the net in case I've missed something in the past but
I found nothing new.

md5 = message digest 5, md5 is a hash algorithm. There are 3
representations of the message digest:
16 byte: raw output
24 byte: base64 encoded
32 byte: hex string

This perl script shows all of them:
-----
#!/usr/bin/perl
use Digest::MD5  qw(md5 md5_hex md5_base64);
my $string = "test"; print "string: " . $string . "\n";
print "md5:        " . md5($string) . "\n";
print "md5_hex:    " . md5_hex($string) . "\n";
print "md5_base64: " . md5_base64($string) . "\n";
-----

Every software I found uses the hex string, so dbmail should use that
one too (that way I can use the dbmail account for SMTP Auth with p.e.
exim).


can someone explain the difference between the md5 algorithm dbmail uses
and the one from RFC 1321? I only know md5s as 32 byte hex string.



Thomas

--
  ________________________________________________________________
  Paul Stevens                                  mailto:[EMAIL PROTECTED]
  NET FACILITIES GROUP                     PGP: finger [EMAIL PROTECTED]
  The Netherlands________________________________http://www.nfg.nl

Reply via email to