IIS ASP - Simple string hashing

This is Interesting: Free IT Magazines  
Home > Archive > IIS ASP > June 2004 > Simple string hashing





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author Simple string hashing
Seth

2004-06-26, 10:19 am

I want to create a simple hash function that can hash strings. Currently I'm
storing passwords as strings in a DB but want to store them as a hash. I
don't need any proper standardised hashing e.g. MD4 or MD5. I also want to
be able to write the function completely using VB Script (therefore no
components etc)

I'm thinking along the lines of converting the string into a number
(probably using the ascii values in some simple formula)
Then divide this by a really large prime number (as large as can fit in a VB
Script variable)
And use the remainder as the hash

This is probably very crude but sufficient for my website. Can anyone give
me any tips on the easiest way to do the above or if it can be improved with
very little extra effort.
Also, what is the largest number that can be stored in a VB script variable,
is it a signed 32 bit number?
And the last question is, how can I find out what the largest prime number
is less than that number? Obviously, I don't need to use a prime number but
it would be better if I did. Thanks in advance


Chris Barber

2004-06-26, 11:59 am

Google:
http://p2p.wrox.com/archive/proasp_howto/2002-02/27.asp

Chris.

"Seth" <seth@doesnotexist.com> wrote in message news:rvgDc.96$MI2.70@newsfe6-win...
I want to create a simple hash function that can hash strings. Currently I'm
storing passwords as strings in a DB but want to store them as a hash. I
don't need any proper standardised hashing e.g. MD4 or MD5. I also want to
be able to write the function completely using VB Script (therefore no
components etc)

I'm thinking along the lines of converting the string into a number
(probably using the ascii values in some simple formula)
Then divide this by a really large prime number (as large as can fit in a VB
Script variable)
And use the remainder as the hash

This is probably very crude but sufficient for my website. Can anyone give
me any tips on the easiest way to do the above or if it can be improved with
very little extra effort.
Also, what is the largest number that can be stored in a VB script variable,
is it a signed 32 bit number?
And the last question is, how can I find out what the largest prime number
is less than that number? Obviously, I don't need to use a prime number but
it would be better if I did. Thanks in advance




---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.710 / Virus Database: 466 - Release Date: 23/06/2004


Seth

2004-06-26, 1:16 pm

Thanks for that, works a treat and saved me some time :-)

"Chris Barber" <chris@blue-canoe.co.uk.NOSPAM> wrote in message
news:uiD5DP6WEHA.808@tk2msftngp13.phx.gbl...
> Google:
> http://p2p.wrox.com/archive/proasp_howto/2002-02/27.asp
>
> Chris.
>
> "Seth" <seth@doesnotexist.com> wrote in message

news:rvgDc.96$MI2.70@newsfe6-win...
> I want to create a simple hash function that can hash strings. Currently

I'm
> storing passwords as strings in a DB but want to store them as a hash. I
> don't need any proper standardised hashing e.g. MD4 or MD5. I also want to
> be able to write the function completely using VB Script (therefore no
> components etc)
>
> I'm thinking along the lines of converting the string into a number
> (probably using the ascii values in some simple formula)
> Then divide this by a really large prime number (as large as can fit in a

VB
> Script variable)
> And use the remainder as the hash
>
> This is probably very crude but sufficient for my website. Can anyone give
> me any tips on the easiest way to do the above or if it can be improved

with
> very little extra effort.
> Also, what is the largest number that can be stored in a VB script

variable,
> is it a signed 32 bit number?
> And the last question is, how can I find out what the largest prime number
> is less than that number? Obviously, I don't need to use a prime number

but
> it would be better if I did. Thanks in advance
>
>
>
>
> ---
> Outgoing mail is certified Virus Free.
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.710 / Virus Database: 466 - Release Date: 23/06/2004
>
>



Eric Gibson

2004-06-28, 8:55 am

Seth wrote:
> I want to create a simple hash function that can hash strings.
> Currently I'm storing passwords as strings in a DB but want to store
> them as a hash. I don't need any proper standardised hashing e.g. MD4
> or MD5. I also want to be able to write the function completely using
> VB Script (therefore no components etc)
>


Here is a function in VBScript to hash strings in classical ASP:

http://rossm.net/Electronics/Comput...ftware/ASP/#MD5

It's fast and efficient from my experience.

In ASP.NET just use the System.Cryptography namespace. There are MD5
functions in it.



> I'm thinking along the lines of converting the string into a number
> (probably using the ascii values in some simple formula)
> Then divide this by a really large prime number (as large as can fit
> in a VB Script variable) And use the remainder as the hash
>
> This is probably very crude but sufficient for my website. Can anyone
> give me any tips on the easiest way to do the above or if it can be
> improved with very little extra effort. Also, what is the largest
> number that can be stored in a VB script variable, is it a signed 32
> bit number? And the last question is, how can I find out what the
> largest prime number is less than that number?



If I knew how to quickly calculate high primes for a 32 bit number... I
wouldn't be telling YOU! I'd be implementing cracks for all the major
algorithms known, and becoming the most (in)famous cryptographer in
history...

:-)

Eric


Seth

2004-06-28, 8:55 am

Thanks for this link, However, I've already implemented the solution Chris
pointed out. It isn't that slow and does the job for me fine.

I also wrote a simple program that would calculate prime numbers. It takes a
number and tells you whether it is prime or not. It also has the option of
if it isn't a prime then it will find the next highest or next lowest prime
number. Knowing the highest prime number for a 32 bit number doesn't let you
crack a one way function any quicker though.

"Eric Gibson" <emg@NOSPAM.NET> wrote in message
news:11GDc.652$O3.23@bignews2.bellsouth.net...
> Seth wrote:
>
> Here is a function in VBScript to hash strings in classical ASP:
>
> http://rossm.net/Electronics/Comput...ftware/ASP/#MD5
>
> It's fast and efficient from my experience.
>
> In ASP.NET just use the System.Cryptography namespace. There are MD5
> functions in it.
>
>
>
>
>
> If I knew how to quickly calculate high primes for a 32 bit number... I
> wouldn't be telling YOU! I'd be implementing cracks for all the major
> algorithms known, and becoming the most (in)famous cryptographer in
> history...
>
> :-)
>
> Eric
>
>



Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com