解密设计密码 [英] Decrypting a devise password

查看:117
本文介绍了解密设计密码的处理方法,对大家解决问题具有一定的参考价值,需要的朋友们下面随着小编来一起学习吧!

问题描述

我需要解密由devise生成的密码。



例如,我的密码是 test123test 。设计生成了这个密码:

  $ 2a $ 10 $ vGeVVu.E0XGjlNEa0xMCK.R0SEH0aFuyJpefrq01Axz6WSbHApPEu 
/ pre>

我需要解密密码并发送 test123test

解决方案

你不能,这就是整点。



Bcrypt将允许你比较 test123test $ 2a $ 10 $ vGeVVu.E0XGjlNEa0xMCK.R0SEH0aFuyJpefrq01Axz6WSbHApPEu ,但它永远不会给你纯文本密码。你可能想要问如何破解加密密码(非常困难!几乎不可能我想)



Jose Valim描述了通过链接到 http://codahale.com/how-to-safely-store-a-password/ 从设计Google集团。


I need to decrypt a password generated by devise.

For example, my password is test123test. devise generated this password:

$2a$10$vGeVVu.E0XGjlNEa0xMCK.R0SEH0aFuyJpefrq01Axz6WSbHApPEu 

I need to decrypt the password and send test123test.

解决方案

You can't, that's the whole point.

Bcrypt will allow you compare test123test with $2a$10$vGeVVu.E0XGjlNEa0xMCK.R0SEH0aFuyJpefrq01Axz6WSbHApPEu, but it will never give you the plain text password back. You might want to ask how to crack a bcrypt encrypted password instead (Very hard! Nearly impossible I think)

Jose Valim describes the motivation behind choosing bcrypt by linking to http://codahale.com/how-to-safely-store-a-password/ from the devise Google Group.

这篇关于解密设计密码的文章就介绍到这了,希望我们推荐的答案对大家有所帮助,也希望大家多多支持IT屋!

查看全文
登录 关闭
扫码关注1秒登录
发送“验证码”获取 | 15天全站免登陆