mdlbear: blue fractal bear with text "since 2002" (0)
mdlbear ([personal profile] mdlbear) wrote 2004-09-24 07:13 am (UTC)

Re: I'm still not quite certain what you're looking at...

You may be looking at an old version of openssl; 0.9.7 has AES-128, -192, and -256 (look in the cyphers rather than the hashes).

The trick is that the URL and encryption keys are derived from the identifier via different hashes -- the URL path is SHA-1, and the key is an MD5 hash of the identifier with a salt. Knowing the original identifier gets you both; knowing only the hashed URL doesn't get you anything else.

In any case, all of this works fine as a Perl one-liner, the rant was about the difficulty of doing the same thing in Java. Took me about a day and a half of research, and a long afternoon of coding.

Post a comment in response:

This account has disabled anonymous posting.
(will be screened if not validated)
If you don't have an account you can create one now.
HTML doesn't work in the subject.
More info about formatting

If you are unable to use this captcha for any reason, please contact us by email at support@dreamwidth.org