[TriLUG] MD5 silly question

David Rasch rasch at raschnet.com
Thu Jul 8 10:50:51 EDT 2004


Md5's don't use salting, and all md5's should be "the same" as they're
defined by an RFC, but I wonder if the difference lies in java using
unicode characters, while php uses 8-bit representations.  

David

On Thu, Jul 08, 2004 at 10:43:31AM -0400, Brian Henning <brian at strutmasters.com> wrote:
> Hi y'all,
>   I'll readily admit that MD5 is quite FM to me yet, but this particular
> thing struck me as odd...  I have a php script which uses the php md5(...)
> function, and a Java app that uses the MD5 functionality of the
> java.security.MessageDigest class.  When I create a hash (of a password
> string, in this case) using the php script and compare it to the hash of the
> same string created by the Java app, they're not the same.  I always sort of
> thought a hash was a hash, and as long as the input was the same, the output
> would be the same...  Would someone mind giving me just a brief explanation
> (I'm not asking for anything in-depth here) of why two different MD5
> programs (for lack of a better word) would generate different hashes for the
> same input?  Could it be something like salting?
> 
> Thanks!
> ~Brian
> 
> ----------------
> Brian A. Henning
> Strutmasters.com
> 866.597.2397
> ----------------
> 
> 
> -- 
> TriLUG mailing list        : http://www.trilug.org/mailman/listinfo/trilug
> TriLUG Organizational FAQ  : http://trilug.org/faq/
> TriLUG Member Services FAQ : http://members.trilug.org/services_faq/
> TriLUG PGP Keyring         : http://trilug.org/~chrish/trilug.asc
> 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
URL: <http://www.trilug.org/pipermail/trilug/attachments/20040708/dcd48f20/attachment.pgp>


More information about the TriLUG mailing list