Re: mac_check in eagle book

2001-04-16 Thread Perrin Harkins
On 16 Apr 2001, Chip Turner wrote: The modperl book mentions it double hashes to prevent a malicious user from concatenating data onto the values being checked. I don't know if they are referring to this weakness, but I suspect they are. Sadly, the book doesn't seem to offer a

Re: mac_check in eagle book

2001-04-16 Thread Larry Leszczynski
Hi Eric - I was wondering if someone could explain to me why in the eagle book it is necessary to perform an md5 twice before sending a mac_check to a user of a number of fields. I read in the mod_perl book that this is done 'to prevent technically savy users from appending data to the

mac_check in eagle book

2001-04-15 Thread Eric Kolve
I was wondering if someone could explain to me why in the eagle book it is necessary to perform an md5 twice before sending a mac_check to a user of a number of fields. I read in the mod_perl book that this is done 'to prevent technically savy users from appending data to the @fields'. my

mac_check in eagle book

2001-04-15 Thread Eric Kolve
I was wondering if someone could explain to me why in the eagle book it is necessary to perform an md5 twice before sending a mac_check to a user of a number of fields. I read in the mod_perl book that this is done 'to prevent technically savy users from appending data to the @fields'. my

Re: mac_check in eagle book

2001-04-15 Thread Ken Williams
[EMAIL PROTECTED] (Eric Kolve) wrote: I was wondering if someone could explain to me why in the eagle book it is necessary to perform an md5 twice before sending a mac_check to a user of a number of fields. I read in the mod_perl book that this is done 'to prevent technically savy users from

Re: mac_check in eagle book

2001-04-15 Thread Abhijit Menon-Sen
On 2001-04-15 23:52:38, [EMAIL PROTECTED] wrote: I was wondering if someone could explain to me why in the eagle book it is necessary to perform an md5 twice before sending a mac_check to a user [...] Any hashing algorithm worth its salt shouldn't have to be done twice. And doing it

Re: mac_check in eagle book

2001-04-15 Thread Chip Turner
Abhijit Menon-Sen [EMAIL PROTECTED] writes: On 2001-04-15 23:52:38, [EMAIL PROTECTED] wrote: I was wondering if someone could explain to me why in the eagle book it is necessary to perform an md5 twice before sending a mac_check to a user [...] Any hashing algorithm worth its