Re: [sipX-dev] PIN token encryption method

Sun, 04 Apr 2010 19:58:17 -0700

so if I understand correctly the password is stored as such:

4321:pbx.domain.com:PIN

and then turned into a saltless MD5 hash?

If I'm mistaken let me know.

Scott Lawrence wrote: 
On Sat, 2010-04-03 at 20:04 -0500, Josh Patten wrote:
  
What encryption method does sipX use to encrypt the pintoken attribute 
in the database? My guess is MD5 with salt but I don't know enough about 
such things to make an educated guess.
    

It's MD5(user:realm:pin) - the H(A1) value from RFC 2617

  

_______________________________________________
sipx-dev mailing list [email protected]
List Archive: http://list.sipfoundry.org/archive/sipx-dev
Unsubscribe: http://list.sipfoundry.org/mailman/listinfo/sipx-dev
sipXecs IP PBX -- http://www.sipfoundry.org/

Reply via email to