"How one way encryption works."
The procedure works like this.I sign up, and use the cunning password "secret" The server then converts it using MD5 (or something more secure) to something like 1AEFDCA2FB23123CFD12D In *theory* (but not always practice, MD5 is well comprimised these days) you can never know the password based on the hash. BUT later on when I sign in, I put in the password "secret", the server then converts it to 1AEFDCA2FB23123CFD12D And noticing that it turns out the same, it decides the password was correct and lets me in. If I put in anything else , the hash's wont match, and I won't get in. Unfortunately a lot of sites still use MD5, which was comprimised by means of rainbow-tables and the like a long time ago. |