Curious Cat

Ph0eniX

Is there a way to decrypt the password string in mysql?

jburfield

the password() function?

Nope. It's one way.

But, you can test against it. Something like:

SELECT name from table where password($value) = password;

-- Jason

JDcrack

There are Mysql functions that allow you to "decrypt" strings.

There are a few deffirent options.

take a look here:
http://www.mysql.com/doc/en/Miscellaneous_functions.html

bobthedog

Yeh - as long as it aint a password() encrypted string...

these use the same crypt funcs as does the linux passwords, and only offer one way encryption .. cos if they weren't then the whole linux security system would be a shambles 🙂

Ph0eniX

Originally posted by JDcrack
There are Mysql functions that allow you to "decrypt" strings.

There are a few deffirent options.

take a look here:
http://www.mysql.com/doc/en/Miscellaneous_functions.html

I was looking at that but I'm not sure how to get the AES_DECRYPT and DES_DECRYPT functions to work.

Also, is there a reason why I can't get the following to work:

SELECT SHA1("pwdstring") as 'SHA-1 Password';

This works just fine:

SELECT MD5("pwdstring") as 'MD5 Hash';

I'm using MySQL v4.23.43

Thanks everyone for your input.