how to decrypt md5 and sha1?

Asked

Viewed 4,528 times

3

good would like to know how to decrypt the md5 and the sha 1 I am using both to enter the password of the user in the bank, however I have to make a page for those who forgot the password and if I only play the value that is in the bank it will send the entire encryption intact I wanted to know if it is possible something like the password is 12345 and encryption for aBvc34ddsa the time the user enters his registered email he takes the password that is in that field and decrypts sending the user the password 12345 and not aBvc34ddsa would have been able to do that?

  • blz still means that if I take the value of the bank to send to the user it will bring me the correct password?

  • MD5 is a one-way hash, you create no way back understood.

  • 1

    And both are not encryption, they are just hashes. In fact, the only advantage of hashing the password is that there is no return. No one would need that in a normal application. Suggested reading: http://answall.com/questions/2402/ - In your case, just send a link to make a new password, and when you do, write the old one.

1 answer

0


Both MD5 and SHA1 are encryption that are not decryptable. The correct way to use is:

When something is encrypted in md5 or sha1 it will generate a 128 bit HASH and will usually have 32 hexadecimal digits. Every time the same word is encrypted in md5 will generate the same hash.

The most common ultimation of this form of encryption is only to check the integrity of the data, for example, sometimes you will download some file and they provide the source code and a "checksum" of the code, this checksum you can generate an md5 of the code you downloaded and compare with the one provided by the manufacturer, if they crash you may consider that the code has not been changed and the application does not have any viruses inside it. It is common to use for passwords, for example, you do not need to know your user’s password, nor is it a good practice to store it in the bank, how can I validate a user in this way? You store the md5 hash in the database, and when the user tries to log in you take the password that he provided encrypts it in md5 and compares, if you hit them are the same, you just validate a password without knowing what the actual password is.

Since sha1 is practically the same thing, the difference is that it generates a 160bit HASG and can generate a hexadecimal of 40 digits.

Hugs

  • 1

    -1 by "cryptography"

  • 1

    There are a few problems in the answer: 1) MD5 and SHA are not encryption 2) integrity / checksum usually use CRC and the like, which are faster algorithms with different objectives and requirements of MD5 and SHA. 3) You should not store the MD5 or SHA directly in the bank as it is not safe. At least you need to make a salt.

  • I see so much answer and question well nothing sees it there, n has 1 to give votedown. Feel free to contribute and edit the answer.

Browser other questions tagged

You are not signed in. Login or sign up in order to post.