Password Encryption

Hi,

Send in an email to support@interactivetools.com and include a link to this post (http://www.interactivetools.com/forum/gforum.cgi?post=92426#92426) and I will have one of our programmers email you directly with details.

Thanks!

Hi multimedia_nj,

You can find CMSB's password hashing function in /lib/login_functions.php in getPasswordDigest() and _getPasswordSalt().

It's basically sha1() with a prefix of '$sha1$' added along with a salt of 'd7w8e' to prevent precomputed dictionary attacks. See: http://en.wikipedia.org/wiki/Salt_(cryptography)

Here's some code to generate a CMSB encrypted password from a plaintext password:

$plaintext = "supernova"; // plaintext password
$encrypted = '$sha1$' . sha1($plaintext . 'd7w8e');
print $encrypted; // prints $sha1$2a8fa94af0fb5126d0c791160aa11835b5b251d3

Hope that helps, let me know if you have any other questions.

Thanks Ð I forwarded this to the developers of the other system and will let you know if we have any additional questions.