Definition of password hashing algorithm in 4.1.7

[Mike Moran]

I've been looking into what algorithm MySQL 4.1.7 uses for password 
hashing/encryption, with a view to ascertaining how secure it is. Does 
it conform to any combinations of published Specs e.g. MD5/SHA-1/etc?

I had a look at com.mysql.jdbc.Util#newHash() and #newCrypt() in 
Connector/J 3.0, but the code is somewhat opaque. Is this algorithm 
native to MySQL or is it just an implementation of a published 
algorithm? Is it worth my time trying to track down the intriguing 
'Monty' code mentioned in Util.java?

Ta,
--
Mike

--
MySQL General Mailing List
For list archives: http://lists.mysql.com/mysql
To unsubscribe:    http://lists.mysql.com/[EMAIL PROTECTED]