Re: CISCO MD5 encryption

["Saif El Sherei" <SSherei () npcegypt com>]

MD5 is a hashing algorithm, hashing is one way meaning it's irreversible. Also it's very safe allot of Linux distros & 
popular webapps uses md5 hashing to secure passwords. 

But if acquired by an attacker if it's a weak password. It can be matched or cracked by means of brute forcing, and/or 
matching hashes using rainbow tables. Other wise it would be very difficult or even near impossible to crack. 

Regards,

Saif El Sherei
OSCP

Sent from my iPhone. 

On Feb 23, 2011, at 1:25 AM, César García <celord () gmail com> wrote:

> Yes, I'am agree that it is the best way, but are there ways that a
> malicious person could decrypt it ?
>
> 2011/2/22 Mike Hale <eyeronic.design () gmail com>:
> > What are you talking about?
> >
> > MD5 is the best way to encrypt passwords on Cisco devices.  The other
> > format (level 7), or even worse, clear text, sucks.
> >
> > http://www.cisco.com/en/US/tech/tk59/technologies_tech_note09186a00809d38a7.shtml
> >
> > On Fri, Feb 18, 2011 at 10:46 AM, Prabath Siriwardana <prabath () wso2 com> wrote:
> > > MD5 hashing is not safe and not recommended to use...
> > >
> > > Thanks & regards,
> > > -Prabath
> > >
> > > On Fri, Feb 18, 2011 at 9:43 PM, César García <celord () gmail com> wrote:
> > > > Hello all, this is my first question here, I have a cisco switch where
> > > > my passwords are encrypted with MD5, I wonder if somebody knows if
> > > > this encryptions uses an iterative hashing or salting for them to be
> > > > less susceptible to rainbow table attack.
> > > >
> > > > Thanks
> > > >
> > > > --
> > > > http://celord.blogspot.com/
> > > >
> > > > ------------------------------------------------------------------------
> > > > Securing Apache Web Server with thawte Digital Certificate
> > > > In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, 
> > > > how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, 
> > > > purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for 
> > > > set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital 
> > > > certificates.
> > > >
> > > > http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
> > > > ------------------------------------------------------------------------
> > >
> > >
> > >
> > > --
> > > Thanks & Regards,
> > > Prabath
> > >
> > > http://blog.facilelogin.com
> > > http://RampartFAQ.com
> > >
> > > ------------------------------------------------------------------------
> > > Securing Apache Web Server with thawte Digital Certificate
> > > In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, 
> > > how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, 
> > > purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for 
> > > set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital 
> > > certificates.
> > >
> > > http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
> > > ------------------------------------------------------------------------
> >
> >
> >
> > --
> > 09 F9 11 02 9D 74 E3 5B D8 41 56 C5 63 56 88 C0
>
>
>
> -- 
> http://celord.blogspot.com/
>
> ------------------------------------------------------------------------
> Securing Apache Web Server with thawte Digital Certificate
> In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, 
> how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, 
> purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for 
> set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital 
> certificates.
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
> ------------------------------------------------------------------------