encryption technique used in phpmyadmin

[mrjameer]

hi

can any body tell me what is the encrytion technique used for the password which is stored in user table and mysql database when we login to phpmyadmin

thanks
mrjameer

[Andrew Johnson]

I would guess md5

php.net search "md5" for more information

[mrjameer]

hi,


if i encrypt the string "welcome" which is my password for login to phpmyadmin in localhost using md5 it is displaying the
40be4e59b9a2a2b5dffb918c0e86b3d7

but the actual value stored in user table in mysql db is
0dbac0205b4301ff

so i think it is not using md5.what do u think?

thanks
mrjameer

[Andrew Johnson]

There's a good chance they also salt it... are you trying to "hack" their protected passwords?

[mrjameer]

hi


lol :D iam not trying to hack the password.i just want to know which technique they are using

regards
mrjameer

[angst]

MySQL encrypts passwords using its own algorithm. This encryption is different from that used during the Unix login process. MySQL password encryption is the same as that implemented by the PASSWORD() SQL function. Unix password encryption is the same as that implemented by the ENCRYPT() SQL function. See the descriptions of the PASSWORD() and ENCRYPT() functions in Section 10.10.2, “Encryption and Compression Functions”. From version 4.1 on, MySQL employs a stronger authentication method that has better password protection during the connection process than in earlier versions. It is secure even if TCP/IP packets are sniffed or the mysql database is captured. (In earlier versions, even though passwords are stored in encrypted form in the user table, knowledge of the encrypted password value could be used to connect to the MySQL server.)


http://dev.mysql.com/doc/refman/5.0/en/user-names.html

[mrjameer]

Hi angst

thanks for your reply,link.
now i got clear idea about encryptions in mysql


regards
mrjameer

[angst]

no prob ;)