On Tue Sep  7 21:13:41 2010, Charlie Stoytgevich wrote:
http://web.archive.org/web/20050224191820/http://cataclysm.cx/wip/digest-md5-crash.htmlstates


I wouldn't actually take an archived document from 7 years ago over the RFC itself...

id like a clarification of this, and if possible a solution i could
implement (php if possible). any help would be much appreciated!

MD5 produces a 128-bit (16-octet) number, but an MD5 hash is normally written as a 32-character hex string.

You can do all this with PHP, I did it myself a few years ago, but you might find it easier just to use:

http://phpxref.com/xref/eventum/include/pear/Auth/SASL/DigestMD5.php.html

I can't tell you if that class expects the challenges and responses to be base64 encoded or not, though - the base64 step is part of XMPP, not SASL.

Dave.
--
Dave Cridland - mailto:[email protected] - xmpp:[email protected]
 - acap://acap.dave.cridland.net/byowner/user/dwd/bookmarks/
 - http://dave.cridland.net/
Infotrope Polymer - ACAP, IMAP, ESMTP, and Lemonade
_______________________________________________
JDev mailing list
Forum: http://www.jabberforum.org/forumdisplay.php?f=20
Info: http://mail.jabber.org/mailman/listinfo/jdev
Unsubscribe: [email protected]
_______________________________________________

Reply via email to