md5 func

[Eccentric]

any way to decrypt as i'm thinking about encrypting my email address's in the db so i would need a way to decyrpt to send emails?

[ScottDiamond.]

I'm not sure if there is a way to do it in emails.

I'd just decrypt it from an online decrypter.

[Invent]

No such thing as a completely working decryptor. They mostly use rainbow patterns.

[ScottDiamond.]

No such thing as a completely working decyrptor. They mostly use rainbow patterns.

Not all of the entries would work, but a few do.

[RichardKnox]

If your encrypting emails use base64_encode then you decode with base64_decode

[QuickScriptz]

I agree with Richard. Thats the best thing to do if you need to decrypt and use it later. But md5() is good for passwords.

[RichardKnox]

Yeh, use md5 for passwords.

[Tomm]

If you are looking for a more secure and effective way then I recommend the mcrypt functions in PHP:

http://us3.php.net/mcrypt

For a secure cipther I recommend the "MCRYPT_RIJNDAEL_256" cipher - Its used by the US Goverment for top secret documents.

[Eccentric]

Just thinking of client confidentiality and if we were hacked which i hope not.

[redtom]

Just thinking of client confidentiality and if we were hacked which i hope not.

But if it was decriptable on your site anyway, if you got hacked it wouldn't stop them from getting the info.

[Jordy]

Its used by the US Goverment for top secret documents.And you know that because? It's unlikely they're going to say as that's a security breach in it's self.

[redtom]

And you know that because? It's unlikely they're going to say as that's a security breach in it's self.

Proper heckers who have attempted or hacked them have proberly found out and posted it on the web.

[Tomm]

And you know that because? It's unlikely they're going to say as that's a security breach in it's self.

http://en.wikipedia.org/wiki/Advanced_Encryption_Standard

"In cryptography, the Advanced Encryption Standard (AES), also known as Rijndael, is a block cipher adopted as an encryption standard by the U.S. government."

Also, http://www.cnss.gov/Assets/pdf/cnssp_15_fs.pdf

"The design and strength of all key lengths of the AES algorithm (i.e., 128, 192 and 256) are sufficient to protect classified information up to the SECRET level. TOP SECRET information will require use of either the 192 or 256 key lengths. The implementation of AES in products intended to protect national security systems and/or information must be reviewed and certified by NSA prior to their acquisition and use"

Also heres an example of it working on my server:

http://usersystem.net/mcrypt.php

Use http://usersystem.net/mcrypt.php?enc=<base64 encoded result here> to decode.

Its base64 encoded for usability, unless you want binary data outputted.

[ScottDiamond.]

And you know that because? It's unlikely they're going to say as that's a security breach in it's self.

Hackers (like the one recently jailed) have found out and posted it on forums etc. You don't need to be told what they use by them personally.

[Eccentric]

http://en.wikipedia.org/wiki/Advanced_Encryption_Standard

"In cryptography, the Advanced Encryption Standard (AES), also known as Rijndael, is a block cipher adopted as an encryption standard by the U.S. government."

Also, http://www.cnss.gov/Assets/pdf/cnssp_15_fs.pdf

"The design and strength of all key lengths of the AES algorithm (i.e., 128, 192 and 256) are sufficient to protect classified information up to the SECRET level. TOP SECRET information will require use of either the 192 or 256 key lengths. The implementation of AES in products intended to protect national security systems and/or information must be reviewed and certified by NSA prior to their acquisition and use"

Also heres an example of it working on my server:

http://usersystem.net/mcrypt.php

Use http://usersystem.net/mcrypt.php?enc=<base64 encoded result here> to decode.

Its base64 encoded for usability, unless you want binary data outputted.
Thats pretty good. :) thanks i think i may try it :S

[Tomm]

The downside is that is requires the mcrypt extention to be loaded and a compiled libmcrypt.dll/.so (Windows/Linux) to be present. Took me about 20 minutes to install it on my Windows 2003 Server.


Thats pretty good. :) thanks i think i may try it :S

[Eccentric]

:( ahhh perhaps i wont actually do that then i may see if i can create a function that will add random letters or something will be hard tho.

[Invent]

You could simply make a function which does like:

a => b
b => a
c => d
d => c

Or a bit more complicated. Then just have another function which reverses it?

[Tomm]

Its not rocket science to crack those though. Even someone like you or me could crack them. If you get a large enough sample you can compare the number of times a letter appears to how many times on average it appears in the English language and hey presto you have decrypted it.


You could simply make a function which does like:

a => b
b => a
c => d
d => c

Or a bit more complicated. Then just have another function which reverses it?