开发者

How to decrypt the encrypted password in md5()? [duplicate]

This question already has answers here: Closed 10 years ago.

Possible Duplicate:

Is it possible to decrypt md5 hashes?

I have encrypt the password using the MySQL function md5()开发者_运维问答,

I need to decrypt the password,

Any one can help.

Thanks.


MD5() generates a hash, not an encrypted string. Thus you can't decrypt it in principle. But studies shown that MD5 is hackable, but it seems too complicated to study.
From "MD5 considered harmful today" @ http://www.win.tue.nl/hashclash/rogue-ca/:

The cryptographic operation that uses a private key to sign data does not deal directly with the data itself, but with a purportedly unique representation of this data, that has a predetermined fixed length, is short and therefore convenient to work with. This can be compared to a fingerprint as a purportedly unique, short and convenient representation of a human being. The process of creating such short representations of data is called "hashing". Unfortunately, because of the fixed length of the hash, there must exist pairs of different inputs that yield the same hash value. Good hash functions, however, have the property that finding such pairs is extremely difficult, even though they are guaranteed to exist. This is precisely where MD5 has a crucial weakness.


MD5 is not encryption, it is a one-way hash. This means that there is no way of going back to the original password given the hashvalue (other than brute-force or a rainbow table attack).

There is a longer, very good explanation, in this similar question and answer.


In theory, MD5 cannot be decrypted. In practice, there are many MD5 "decrypters", but they use brute force, or large database of already decrypted code etc... The answerer above probably used one of these. The number of possible combinations is a 1 followed by 48 zeros... enough for a life time.

Source: http://md5pass.com


MD5 isn't an encryption algorithm. It's a one-way hash algorithm, so without an attack, you're not supposed to be able to get the password from the MD5 hash.

The idea is that you generate a hash from the password, and then when provided with the password you can confirm that it hashes to the same value. You're not supposed to be able to go the other way.


The best reasonably simple way is to search the hash in Google. E.g.:

  • http://www.google.es/search?q=73868cb1848a216984dca1b6b0ee37bc
0

上一篇:

下一篇:

精彩评论

暂无评论...
验证码 换一张
取 消

最新问答

问答排行榜