Miva, Miva Script, Miva Empresa, Miva Mia amd Miva Merchant are registered trademarks of the Miva Corporation
 
Ivo Truxa - truXoft control systems: advanced programming and custom IT solutions home / about / webdesign / Miva / automation / contact

http://mivo.truxoft.com
MIVO!
miva beyond limits

 

MIVA®  SECURITY:  MD5 Message Digest (fingerprint) in Miva

by Petr Kutil and Ivo Truxa, 01/17/2001

  1. What Is MD5?
  2. Examples Of Use
  3. MD5 Miva Script Source
  4. Test It!
  5. Legal Disclaimer
  6. Useful links
  7. User Comments

top

What Is MD5?

MD5 was developed by Professor Ronald L. Rivest of MIT.
From the RFC 1818:

The algorithm takes as input a message of arbitrary length and produces as output a 128-bit "fingerprint" or "message digest" of the input. It is conjectured that it is computationally infeasible to produce two messages having the same message digest, or to produce any message having a given prespecified target message digest. The MD5 algorithm is intended for digital signature applications, where a large file must be "compressed" in a secure manner before being encrypted with a private (secret) key under a public-key cryptosystem such as RSA.

top

Examples Of Use

MD5 is a one-way encryption algorithm. It works in similar way as the Miva CRYPT operator, with the exception that it uses a more secure algorithm and it is not limited to strings with up to 8 characters of length. MD5 can generate secure checksums on data of any length.

MD5 was used for example in PGP in the digital signature process (but recently it is replaced with other hash algorythms, claimed to be more secure). Some payment gateways use MD5 to disable a man-in-the-middle attack when transferring data.

Some areas of use:

  • Secure checksums
  • Digital signatures and certificates
  • Document verifications
  • Secure logins
  • Secure password transfer or stocking

top

MD5 Miva Script

The MD5 algorithm was ported to Miva by Petr Kutil in December 2000. He has used a JavaScript MD5 library from Paul Johnston as a template. I have rewritten it with an eye on performance and fixing some compatibility issues, in January 2001.

VIEW THE MIVA SOURCE HERE


top

Test It!

 


top

Legal Disclaimer (RSA's MD5 disclaimer)

Copyright (C) 1991-2, RSA Data Security, Inc. Created 1991. All rights reserved.

License to copy and use this software is granted provided that it is identified as the "RSA Data Security, Inc. MD5 Message-Digest Algorithm" in all material mentioning or referencing this software or this function.

License is also granted to make and use derivative works provided that such works are identified as "derived from the RSA Data Security, Inc. MD5 Message-Digest Algorithm" in all material mentioning or referencing the derived work.

RSA Data Security, Inc. makes no representations concerning either the merchantability of this software or the suitability of this software for any particular purpose. It is provided "as is" without express or implied warranty of any kind.

These notices must be retained in any copies of any part of this documentation and/or software


top

Some Useful Links

What are MD2, MD4, and MD5?
RFC 1321: The MD5 Message-Digest Algorithm
MD5 Homepage (unofficial)
RFC 1810: Report on MD5 Performance
RFC 1828: IP Authentication using Keyed MD5
RFC 1828: RIP-2 MD5 Authentication
Protection of BGP Sessions via the TCP MD5 Signature Option
Search the RFC Database
Discussion about MD5


top

   

Miva and some other terms used on this page are registerd trademarks of the Miva Corporation
copyright  truXoft  © 1997-2008