Results 1 to 7 of 7

Thread: Decrypting password

  1. #1
    Join Date
    Mar 2011
    Posts
    3

    Default Decrypting password

    Hello,

    I have an application covered Spring Security.
    Is there any way to decrypt password encrypted via Spring Security?

    Thanks

  2. #2
    Join Date
    Sep 2004
    Location
    Manchester, NH
    Posts
    1,236

    Default

    What algorithm are you using to encrypt the passwords? It depends on the algorithm, but if you are using a recommended one (SHA etc) it will probably not be possible to decrypt (without a lot of computing power, anyway)
    Peter Mularien | Blog
    Author, Spring Security 3 (Book) - Packt Publishing, Available in print and eBook form
    SCJP 5, Oracle DBA
    Any postings are my own opinion, and should not be attributed to my employer or clients.


  3. #3
    Join Date
    Mar 2011
    Posts
    3

    Default

    Hello Peter,

    i use md5 and there are some website decrypting md5 but they do not help.

    Thanks.

  4. #4
    Join Date
    Sep 2006
    Location
    UK
    Posts
    8,424

    Default

    If it's a hash then you're really not supposed to be able to decrypt it, computationally infeasible. You can use something like rainbow hash cracking but if it's salted then you're out of luck.
    Barracuda Networks SSL VPN Lead Developer
    http://pramatr.wordpress.com
    http://twitter.com/karldmoore
    http://www.linkedin.com/in/karldmoore
    Any postings are my own opinion, and should not be attributed to my employer or clients.

  5. #5
    Join Date
    Sep 2004
    Location
    Manchester, NH
    Posts
    1,236

    Default

    Can you describe why you need to decrypt an encrypted password? What problem are you trying to solve?
    Peter Mularien | Blog
    Author, Spring Security 3 (Book) - Packt Publishing, Available in print and eBook form
    SCJP 5, Oracle DBA
    Any postings are my own opinion, and should not be attributed to my employer or clients.


  6. #6
    Join Date
    Mar 2011
    Posts
    3

    Default

    Hello friends,

    I wonder and only want to learn it as general information. Also, my application is used by the customers. They can sometimes forget their passwords and they need to change their passwords but that is already safe way.

    Thanks for the information that you gave

  7. #7
    Join Date
    Sep 2004
    Location
    Manchester, NH
    Posts
    1,236

    Default

    That's the reason I asked Actually, any application that can send me my unencrypted password is most assuredly storing it in an insecure manner. Instead of sending users their passwords, provide them with a way to reset their password, using a link in an email and a one-time nonce. Just a suggestion!
    Peter Mularien | Blog
    Author, Spring Security 3 (Book) - Packt Publishing, Available in print and eBook form
    SCJP 5, Oracle DBA
    Any postings are my own opinion, and should not be attributed to my employer or clients.


Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •