How can I encrypt string using the MD5 method?

[shappen]

Is there a function to do this ?
with the string parameter,it return the encryption result of the string
?

[Walter Roberson]

In article <11************ *********@f14g2 000cwb.googlegr oups.com>,
sh*****@gmail.c om <sh*****@gmail. com> wrote:

Is there a function to do this ?
with the string parameter,it return the encryption result of the string

MD5 is not an encryption function: it is a hash function.

There are no encryption functions specified by the C standards.
No hash functions either.

There are a number of fairly portable MD5 libraries. See for example
http://sourceforge.net/projects/libmd5-rfc/

I had a look at the above code, and it looks to be fairly
standard C -- except that at one point it attempts to determine
whether the machine is "big endian" or "little endian" and it
appears to me at first look that the test done for that might perhaps
not be completely portable, perhaps failing on machines whose
short is the same size as int.

--
Ceci, ce n'est pas une idée.

[shappen]

Thank you for reply!
In PHP there is a md5() function to do this and I think if there is an
equal function in C.
By the way,is there any better encryption method than MD5??

[Richard Heathfield]

sh*****@gmail.c om said:

Thank you for reply!
In PHP there is a md5() function to do this and I think if there is an
equal function in C.
By the way,is there any better encryption method than MD5??

MD5 is not an encryption method. It's a hashing method.

Whether one encryption method is "better" than another depends on what you
mean by "better". Faster? Easier key distro? More secure? ROT-26 is way
faster than AES. It's much easier to solve the key distribution problem for
AES than for OTP. OTP is vastly (infinitely?) more secure than ROT-26.

--
Richard Heathfield
"Usenet is a strange place" - dmr 29/7/2005
http://www.cpax.org.uk
email: rjh at that domain (but drop the www, obviously)

[shappen]

My better means more secure.
So as you say OTP may be the answer.
How can use it in C?Could you give me some advice?

[Richard Heathfield]

sh*****@gmail.c om said:

My better means more secure.
So as you say OTP may be the answer.
Unlikely, even though it is information-theoretically secure (which means
that, used properly, it is provably uncrackable).
How can use it in C?
void otp(unsigned char *o,
const unsigned char *i,
const unsigned char *k,
size_t len)
{
while(len--)
{
*o++ = *i++ ^ *k++;
}
}
Could you give me some advice?

In OTP, the key has to be as long as the message, completely random, and
never re-used. This leads to practical problems in key distribution which
render the OTP useless for many purposes. Having said that, for 100%
security it can't be beaten, which is why you used to see so many film
snippets in the 1970s where politicians visiting other countries would
always have a courier with them with a briefcase chained to his wrist. Ever
wonder what was in the briefcase? Key material!

--
Richard Heathfield
"Usenet is a strange place" - dmr 29/7/2005
http://www.cpax.org.uk
email: rjh at above domain (but drop the www, obviously)

[shappen]

You say the following is its main implementation:
void otp(unsigned char *o,
const unsigned char *i,
const unsigned char *k,
size_t len)
{
while(len--)
{
*o++ = *i++ ^ *k++;
}
}

?

[Richard Heathfield]

sh*****@gmail.c om said:

You say the following is its main implementation:
void otp(unsigned char *o,
const unsigned char *i,
const unsigned char *k,
size_t len)
{
while(len--)
{
*o++ = *i++ ^ *k++;
}
}

?

Yes. The OTP is a remarkably simple algorithm, and guaranteed uncrackable if
used correctly.

--
Richard Heathfield
"Usenet is a strange place" - dmr 29/7/2005
http://www.cpax.org.uk
email: rjh at above domain (but drop the www, obviously)

[Walter Roberson]

In article <11************ *********@g49g2 000cwa.googlegr oups.com>,
sh*****@gmail.c om <sh*****@gmail. com> wrote:

You say the following is its main implementation:
Please note, other people are not reading by threading newsreaders, or might
not have received the previous message yet, or the message might have
expired for them. [I've seen expiration times set as low as 4 hours
on some newsservers.] It is therefore best to include enough context
for people to know what you are talking about.

In this particular case, "its" does not have meaning without the
discussion context. The missing referant is that you are discussing
implementation of OTP (One Time Pads).

[You also left out the attribution, so we can't easily tell who
wrote the code you quoted.]
void otp(unsigned char *o,
const unsigned char *i,
const unsigned char *k,
size_t len)
{
while(len--)
{
*o++ = *i++ ^ *k++;
}
} ?

Yes, that is a complete and correct implementation of One Time Pad
encryption.

i is the input stream of bytes. i is -not- constrained to be a "string":
NUL bytes are acceptable input. Because of that, the length of the
input is passed in len.

k is the keying material. The key must be as long as the input. As the
previous poster remarked, you must not reuse the key material, or else
the security of your OTP is severely put at risk. The key must *not* be
from a "random number generator": it must be truly random, such as
from physically flipping coins millions of times, or from
radioactive decay. This randomness is important!!! Note: random NUL bytes
are acceptable in the key material, so k is not a "string" either.

o is the output buffer, which must be as long as the input. It is
possible for the encryption process to result in NUL bytes in places,
so s is not a "string" either.

The output really is just formed from the input xor'd with the key.
When the output is xor'd with the key, the result would be the
input back again. But first you have to get a copy of the key to
the recipient; that's what the other poster was referring to as
"key distribution".
--
Any sufficiently old bug becomes a feature.

[Walter Roberson]

In article <11************ **********@f14g 2000cwb.googleg roups.com>,
sh*****@gmail.c om <sh*****@gmail. com> wrote:

In PHP there is a md5() function to do this and I think if there is an
equal function in C.

Not in the C standard, but you can find md5 code in several places
such as the one I referced.

PHP has gone through a number of versions; earlier versions did
not have md5(). C goes through very very few official versions.

PHP is expected to provide -all- of the functions defined for
its current version, and the functions that will be called upon
are not known until runtime, so PHP can end up being a largish
executable. C expects that you will link in only the functions
you need for a particular task, so C can end up with small fast
executables.
--
"Who Leads?" / "The men who must... driven men, compelled men."
"Freak men."
"You're all freaks, sir. But you always have been freaks.
Life is a freak. That's its hope and glory." -- Alfred Bester, TSMD