RE: About password_to_key algorithm.

If you check RFC3414, then you will see that the algorithm to 
generate the key will take the "password" or "passphrase" and
repeat it as many times as needed to fill up a 
string of length 1,048,576 octets over which it runs MD5 or SHA
in order to create the key. See page 78 of RFC3414

Now if you take pasword test and try to generate that string of
length 1,048,576 octets, then you will find that the exact same
string gets generated when you use testtest or testtesttest

Hope that explains it,

Thanks,
Bert 

> -----Original Message-----
> From: Parasuraman [mailto:[email protected]]
> Sent: dinsdag 18 februari 2003 15:50
> To: [email protected]
> Subject: About password_to_key algorithm.
> 
> 
> Hi all,
> 
> I came across a document/RFC long ago, that if the password is given 
> repeatedly, then the key generated from it is the same.
> For example, the key generated for the passwords "test", "testtest", 
> "testtesttest" are all the same.
> 
> Can anyone of you, please point me to that concreate evidence.
> 
> Thanks for your time and effort.
> 
> Regards,
> R.Parasuraman.
>