Hashes are not reversable, and the salt is used to further prevent
unhashing based on dictionary attacks. To authenticate the password,
you'll need to hash the password using the salt and compare it to the
hashed password in the database. If they match, the original
passwords were the same. Chances are good the hash algorithm is MD5
or SHA-1, both of which CF supports via it's hash() built-in function.
If you have an account that you know the password of, it should be
simple to figure out the right algorithm and salt/password assembly to
generate the approprate matching hash. My first guess (in psuedocode)
would be:
creds = query("select salt, hashedPassword from aTable where username
= #form.username#");
incomingHash = hash(creds.salt & form.password);
if (incomingHash EQ creds.hashedPassword) {
// it's valid!
}
cheers,
barneyb
On 10/25/06, Smith, Daron [PA] <[EMAIL PROTECTED]> wrote:
> Anyone have any experience in unhashing a Dotnetnuke password with CF.
> We need to authenticate a CF app with a DotNetNuke database. The
> passwords are stored in a hashed format. There is also a password salt
> field, which I'm assuming is a key to dehash the password field. Any
> help would be appreciated.
>
> Thanks,
> Daron Smith
> PSEA IT
>
> "PSEA E-mail Firewall" annotation on Wed Oct 25 2006 16:17:48
> ---------------------------------------------------------------------
> NOTICE: Only the individual sender is responsible for the content of the
> message, and the message does not necessarily reflect the position or policy
> of the Pennsylvania State Education Association.
> ---------------------------------------------------------------------
>
>
>
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Introducing the Fusion Authority Quarterly Update. 80 pages of hard-hitting,
up-to-date ColdFusion information by your peers, delivered to your door four
times a year.
http://www.fusionauthority.com/quarterly
Archive:
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:258057
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
