On Tue, Jan 27, 2009 at 5:25 PM, Leo Soto M. <leo.s...@gmail.com> wrote:

[...]

> By poking at the ODS code, looks like the correct function is:
>
>  password_hash = SHA1(concat(user_name, pwd_magic_calc(username, password, 
> 1)))
>
> But then, what is the definition of pwd_magic_calc? (assuming that the
> function shown above is correct).

Experimenting on my local virtuoso I've found that for all inputs I
provided the following holds true:

  pwd_magic_calc(username, password, 1) == password

Is that something we can rely on to be invariant?

Regards,
-- 
Leo Soto M.
http://blog.leosoto.com

Reply via email to