On Tuesday 31 July 2007 17:59:32 nossatv_sd wrote:
> I have seen people using sha package to encrypt strings (e,g
> passwords). An example is shapassword =
> sha.new(kw.get('password')).hexdigest(). Now I am not sure how to
> decrypt the password encrypted this way but we could obviously
> validate the password without decrypting. May be you guys already know
> about it but just wanted to throw in my two cents.

SHA is a hash algorithm.  You can't decrypt a hash.  What happens is that you 
encrypt something using the same salt and compare the result with the stored 
hash: if they're the same you have a successful match.

-- 
Jorge Godoy      <[EMAIL PROTECTED]>


--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"TurboGears" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/turbogears?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to