Re: [OT] Is calculating an MD5 hash of a Rjindael encrypted block and it's key insecure?

2004-08-15 Thread Marcel Weber
Hi I finished the discussed mod_perl module and published it on CPAN. It's name is Apache::AutoLogin Thanks again for the input from everyone. Cheers Marcel -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: [OT] Is calculating an MD5 hash of a Rjindael encrypted block and it's key insecure?

2004-08-12 Thread Marcel Weber
Richard Atterer wrote: On Thu, Aug 12, 2004 at 01:56:53PM +0200, Marcel Weber wrote: No, it doesn't mean that. Current browsers will cache the password, AFAIK until the end of the session by default, and forever if you enable the option "Remember this password" or similar. I know. - No more crede

Re: [OT] Is calculating an MD5 hash of a Rjindael encrypted block and it's key insecure?

2004-08-12 Thread Richard Atterer
On Thu, Aug 12, 2004 at 01:56:53PM +0200, Marcel Weber wrote: > Richard Atterer wrote: > >This strikes me as a weird solution. What's wrong with setting the > >cookie lifetime higher, so that people only need to log in e.g. once a > >day? Hmm, presumably the web application is closed-source or un-h

Re: [OT] Is calculating an MD5 hash of a Rjindael encrypted block and it's key insecure?

2004-08-12 Thread Marcel Weber
Hi all Well, I figured out the problem, why my module hanged... It was a programming fault... Well in that case, I do not need any md5 checksum at all... Problem solved Thanks again for all precious input I got Cheers Marcel -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsub

Re: [OT] Is calculating an MD5 hash of a Rjindael encrypted block and it's key insecure?

2004-08-12 Thread Marcel Weber
Hi Richard Atterer wrote: My solution is a mod_perl module, that catches every request before the authentication module and supplies the credentials automatically. This works with ANY apache authentication modules using basic authentication. This strikes me as a weird solution. What's wrong with

Re: [OT] Is calculating an MD5 hash of a Rjindael encrypted block and it's key insecure?

2004-08-12 Thread Richard Atterer
Hello, here's my ยค0.02... note that I would not call myself a crypto expert either. On Thu, Aug 12, 2004 at 11:54:14AM +0200, Marcel Weber wrote: > My solution is a mod_perl module, that catches every request before the > authentication module and supplies the credentials automatically. This > w

[OT] Is calculating an MD5 hash of a Rjindael encrypted block and it's key insecure?

2004-08-12 Thread Marcel Weber
Hi Although this question is a bit off topic, I think that this list is the best audience to answer it. For the company I'm working I had to write an apache module, that the users do not have to enter their username password everytime they log onto the intranet web server. My solution is a mod