md5 encription
-
Hi, I have a registration form(in jsp) with a password field. I want to convert that password to md5 in client side before storing it to data base.when retriving that password that md5 password will travel in the network and decript to its original one in the client side jsp page.ALL THE ENCRIPTION AND DECRIPTION WILL BE DONE IN CLIENT SIDE JSP PAGES ONLY.and md5 password will travel in the network
-
Hi, I have a registration form(in jsp) with a password field. I want to convert that password to md5 in client side before storing it to data base.when retriving that password that md5 password will travel in the network and decript to its original one in the client side jsp page.ALL THE ENCRIPTION AND DECRIPTION WILL BE DONE IN CLIENT SIDE JSP PAGES ONLY.and md5 password will travel in the network
-
Hi, I have a registration form(in jsp) with a password field. I want to convert that password to md5 in client side before storing it to data base.when retriving that password that md5 password will travel in the network and decript to its original one in the client side jsp page.ALL THE ENCRIPTION AND DECRIPTION WILL BE DONE IN CLIENT SIDE JSP PAGES ONLY.and md5 password will travel in the network
Not only is MD5 deprecated in favour of more secure algorithms, it's a hashing algorithm, not an encryption algorithm. There is no "password", and you cannot "decrypt" the hashed value. But that's a good thing, because you should never be able to decrypt the user's password. To validate that the user has entered the correct password, you just apply exactly the same hashing algorithm to the entered password, and compare the result to the stored hash value. Salted Password Hashing - Doing it Right[^] As for doing the hashing on the client side, that's a very bad idea. Anyone who can sniff the network traffic doesn't need to know the original password to impersonate the user; they can just submit the hashed password instead. Set up an SSL certificate on your site, and ensure that your login page is only ever served over HTTPS. That way, the infrastructure will protect the password in-flight, and you can do your salted password hashing on the server, where it belongs.
"These people looked deep within my soul and assigned me a number based on the order in which I joined." - Homer
