Programming Forums
User Name Password Register
 

RSS Feed
FORUM INDEX | TODAY'S POSTS | UNANSWERED THREADS | ADVANCED SEARCH

Reply
 
Thread Tools Display Modes
Old Apr 9th, 2006, 3:30 PM   #1
Riddle
Programmer
 
Riddle's Avatar
 
Join Date: May 2005
Location: Nar Shaddaa
Posts: 42
Rep Power: 0 Riddle is on a distinguished road
Send a message via ICQ to Riddle Send a message via AIM to Riddle Send a message via MSN to Riddle
Ras

Okay, so.. some of you may remember me (but I doubt it). Anyway, I'm working on a project now called RAS (Riddle's Authentication System), a Python script that can do the following tasks:

1) Generate hashes:
Hashes are generated using the replace() string method, md5.md5(), and sha.sha()- they can be generated in a number of ways, depending on if you change the source code, but this is the default generation process: load 'replace lines' from a config file, do as the replace lines instruct with replace(), then change the modified password to an MD5 hash, and that into a SHA hash.

2) Generate config files with random replace lines:
If you use different replace lines file for each hash generation, it will come out different- no matter what the password is. With one function, repgen(), you can make a new config file with randomly generated replace lines easily.

3) Compare two hashes as a means of authentication:
If you have a hash stored in a config file (which you can do by using the correct arguments with hashgen()) with the replace lines with which it was created, you can compare a generated hash with the one in the file (each hash in a file (there is no limit) has a unique name).

Or, you can have a client and server which both have the same config file (same replace lines), and the client could generate a hash with RAS and then send it to the server, which would compare it to the one in the config file as a means of authentication- and any packet sniffers wouldn't be able to crack the hash, if detected, because they don't have the replace lines (plus, they'd have to crack the md5 and sha parts of the hash (on top of that, if you edit the code (just add a few easy lines), you can put the md5/sha hash(es) through the replacement process (which would pretty much destroy any attempt to crack a hash generated with RAS))).

It can be found here.
Riddle is offline   Reply With Quote
Reply

Bookmarks

« Previous Thread in Forum | Next Thread in Forum »

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump




DaniWeb IT Discussion Community
All times are GMT -5. The time now is 5:50 PM.

Powered by vBulletin® Version 3.7.0, Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Copyright ©2007 DaniWeb® LLC