[TYPO3-dev] md5 encryption with kb_md5fepw

[Bernhard Kraft]

Christoph Koehler wrote:

> So the actual password is just md5'ed, and then when someone logs in it
> is  combined with the challenge from the server and compared to the
> md5'ed  password plus challenge from the client?
> Am I getting this right?

If you mean by that that something like:


sendToServerValue = md5(password+challenge);

is done. then yes.

you are right.


greets,
Bernhard