Eoin

Hi grimpirate, I think I can see where you're coming from in that noone is going to have a remade list of hashs to compare against your own. But I really think that you should use a tried and tested secure hash.

My reasoning is this, weak passwords such as a dictionary word will always be crackable, good hash function or not, but strong passwords together with a secure hash 'should' be uncrackable. However if your home brewed hash function does not stand up to cryptanalysis then no matter how secure a password is it will always be crackable.

So I suppose home brewed make weak passwords slightly better in that there is added effort on behalf of the cracker to circumvent them, but it can also render strong passwords equally bad as the weak.

__________________
Visit my website BinaryNotions.

grimpirate

I get what you're saying, but half the fun of the program is developing your own code to do stuff. I don't know that my function compares with md5 or sha1 but if you're curious just dl the latest GrimBB zip distro and check it out. I tested 4000 unique strings to see if any hashes repeated and there were no collisions. I'd test more buuuuuuuuuuut the fan on my laptop might explode lol.

__________________
Lo, there do I see my father. 'Lo, there do I see My mother, and my sisters, and my brothers. 'Lo, there do I see The line of my people... Back to the beginning. 'Lo, they do call to me. They bid me take my place among them. In the halls of Valhalla... Where the brave... May live... ...forever.. GrimBB | Mimesis

Eoin

I'm certainly no cryptanalyst (though would love to be just because of it's really cool name) so wouldn't know a good hasher from a bad one .

P.S. Is that quote on your sig from Genghis Khan, I'm convinced I heard it on a history documentary.

__________________
Visit my website BinaryNotions.

DaWei

Just a tip: amateur encryption is virtually worthless in terms of crackability. Pros may spend 15 years in the field and still make mistakes yielding insecure encryption. Not that you shouldn't do it as a learning exercise, just be aware that it's not much good against pros.

__________________
Abstraction doesn't make it impossible to write bad code; it makes it possible to write superior code.
Contributor's Corner: Grumpy on C++ Exceptions DaWei on Pointers

grimpirate

Eoin:
Yes you are correct it is a quote from Genghis Khan. You may know the paraphrased version:
General: Conan what is best in life?
Conan: To crush your enemies, see them driven before you, and to hear the lamentation of their women.
DaWei:
How dare you! You're an amateur! lol I tease I tease. Ya I know chances are my hash function isn't all that great, but whatever it is a learning exercise and that's why I did it. All in all I don't imagine any cryptographers will be wasting their time trying to hack my hash. I mean I the grimpirate has enemies, but they're not necessarily the smart type o_O

In case anyone's interested here's the zip file that has the hash in it. Also as you can see from that URL GrimBB has moved ^_^

__________________
Lo, there do I see my father. 'Lo, there do I see My mother, and my sisters, and my brothers. 'Lo, there do I see The line of my people... Back to the beginning. 'Lo, they do call to me. They bid me take my place among them. In the halls of Valhalla... Where the brave... May live... ...forever.. GrimBB | Mimesis

DaWei

I AM an amateur. I would never attempt to devise my own (useful) encryption scheme.

__________________
Abstraction doesn't make it impossible to write bad code; it makes it possible to write superior code.
Contributor's Corner: Grumpy on C++ Exceptions DaWei on Pointers

piercy

i didnt read all this post but cant MD5's be found out using a PHP MD5 function? im sure i saw something somewhere where you encrypt passwords as they go in then unencript as they go out.

__________________
this forum rules you guys are great!
thanks to all who help
piercy

Wizard1988

No they can't or aren't supposed to be found out. MD5 works one way, and after you have a hash you would only compare it to another hash to make sure if they are the same.

__________________
JG-Webdesign