From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf
Of Bill Rawlinson
> don't you think it is odd that two different strings decrypt to the same
value?

Not all that odd, depending on the encryption method used.  Many methods of
encryption have the potential for overlap in the encrypted data - many
hashing algorithms, for instance, explicitly implement hash collision code
in the event that two pieces of data hash to the same encoded value.

In this specific case, I'd bet that the decryption routine doesn't
necessarily use all the bytes in the output.  The default method used by CF
is a very weak binary XOR symmetric cipher combined with a UUEncode, which
makes it not too uncommon to get the types of results you're seeing.  Since
CF7 has much more secure versions, which would also eliminate the behavior
here you don't like, I'd use them instead.

See here for an explanation of all of the different ciphers:
http://livedocs.macromedia.com/coldfusion/7/htmldocs/wwhelp/wwhimpl/common/h
tml/wwhelp.htm?context=ColdFusion_Documentation&file=part_cfm.htm

Hope that helps!

Roland





----------------------------------------------------------
You are subscribed to cfcdev. To unsubscribe, send an email to 
cfcdev@cfczone.org with the words 'unsubscribe cfcdev' as the subject of the 
email.

CFCDev is run by CFCZone (www.cfczone.org) and supported by CFXHosting 
(www.cfxhosting.com).

An archive of the CFCDev list is available at 
www.mail-archive.com/cfcdev@cfczone.org


Reply via email to