[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Antw: SSHA hashed passwords && retrieving the salt



El día Wednesday, January 15, 2014 a las 10:00:47AM +0100, Ulrich Windl escribió:

> >>> Matthias Apitz <guru@unixarea.de> schrieb am 15.01.2014 um 09:20 in
> Nachricht
> <20140115082007.GA7160@sh4-5.1blu.de>:
> 
> [...]
> > I can repeat the given example with:
> > 
> > $ echo -n 'MTIzNDU2Nzg5MDEyMzQ1Njc4OTAxMjM0' | mmencode -u
> > 123456789012345678901234
> > 
> > but when I run the original string through decode, I get only binary 
> > nonsense from:
> > 
> > echo -n 'MgwfkqCnGu2XUvmW3sNnrZ9pV0TJl/CD' | mmencode -u
> > 2
> >   §íRùÞÃg-ð
> 
> Remember: A byte is 8 bits; any combination. Just count bytes. Maybe this:
> 
> echo -n 'MgwfkqCnGu2XUvmW3sNnrZ9pV0TJl/CD' | mmencode -u | hexdump -C

Thanks for the feedback; I have tried this already before:

$ echo -n 'MgwfkqCnGu2XUvmW3sNnrZ9pV0TJl/CD' | mmencode -u | od -tx1   
0000000    32  0c  1f  92  a0  a7  1a  ed  97  52  f9  96  de  c3  67 ad
0000020    9f  69  57  44  c9  97  f0  83          

but was thinking the salt, the last 4 bytes (0xc997f083) should have
been in ASCII... do they really seed with binary in LDAP?

	matthias
-- 
Matthias Apitz               |  /"\ ASCII Ribbon Campaign: www.asciiribbon.org
E-mail: guru@unixarea.de     |  \ / - No HTML/RTF in E-mail
WWW: http://www.unixarea.de/ |   X  - No proprietary attachments
phone: +49-170-4527211       |  / \ - Respect for open standards