Re: LoginMD5.pm (Perl/CGI - Javascript User Authentication)

Alan,
     Just a quick note, MD5 is a secure hash algorithm, not an encryption
algorithm. MD5 produces a 128 bit secure hash output of the input{s},
unless you can explain your protocol a bit more I will have to assume
that there a flaw in your application.
					- John

On Sat, 24 Aug 2002, Alan Raetz wrote:

> Hi,
> 
> I created a module for Perl/CGI script user authentication that uses MD5 encryption 
> on both the client browser (using Javascript) and on the server (using Digest::MD5) and 
> I wanted to solicit comments and get any feedback from the group.
> 
> http://perl-md5-login.sourceforge.net/
> 
> http://sourceforge.net/projects/perl-md5-login/
> 
> I'm definitely not a security expert, this was just something I needed for my own
> project that I decided to make open-source, it seemed like something other
> people could use... 
> 
> The additional feature that I have working but haven't released is tying the cookie
> to the IP address; a user can move around, but each session is tied to the cookie hash.
> But I know this is just an environment variable that can also be hacked...
> 
> One thing I'm wondering if is if this could possibly be a candidate for CPAN...
> 
> comments?
> 
> -alan
> 
> 
> 
>