解密设计密码 [英] Decrypting a devise password
问题描述
我需要解密由devise生成的密码。
例如,我的密码是 test123test
。设计生成了这个密码:
$ 2a $ 10 $ vGeVVu.E0XGjlNEa0xMCK.R0SEH0aFuyJpefrq01Axz6WSbHApPEu
/ pre>
我需要解密密码并发送
test123test
。解决方案你不能,这就是整点。
Bcrypt将允许你比较
test123test
与$ 2a $ 10 $ vGeVVu.E0XGjlNEa0xMCK.R0SEH0aFuyJpefrq01Axz6WSbHApPEu
,但它永远不会给你纯文本密码。你可能想要问如何破解加密密码(非常困难!几乎不可能我想)
Jose Valim描述了通过链接到 http://codahale.com/how-to-safely-store-a-password/ 从设计Google集团。
I need to decrypt a password generated by devise.
For example, my password is
test123test
. devise generated this password:$2a$10$vGeVVu.E0XGjlNEa0xMCK.R0SEH0aFuyJpefrq01Axz6WSbHApPEu
I need to decrypt the password and send
test123test
.解决方案You can't, that's the whole point.
Bcrypt will allow you compare
test123test
with$2a$10$vGeVVu.E0XGjlNEa0xMCK.R0SEH0aFuyJpefrq01Axz6WSbHApPEu
, but it will never give you the plain text password back. You might want to ask how to crack a bcrypt encrypted password instead (Very hard! Nearly impossible I think)Jose Valim describes the motivation behind choosing bcrypt by linking to http://codahale.com/how-to-safely-store-a-password/ from the devise Google Group.
这篇关于解密设计密码的文章就介绍到这了,希望我们推荐的答案对大家有所帮助,也希望大家多多支持IT屋!