How to do MD5 encryption in JSP for password login and registration?

Guys, how to do MD5 encryption in JSP for password login and registration?

Re: How to do MD5 encryption in JSP for password login and registration?

What have you tried? Where are you stuck?

Re: How to do MD5 encryption in JSP for password login and registration?

Code :

<%@page contentType="text/html; charset=iso-8859-1" language="java" import="java.security.MessageDigest"%>
<html>
<body>
This jsp code shows an example of a functioning md5 hash.<br>
The plaintext password is 'password' and is hard coded.<br>
The MD5 hash version of 'password' is '5f4dcc3b5aa765d61d8327deb882cf99'<br>
and is calculated each time the page is loaded.<br><br>
<%
 
// Set password string, and print it out
String passwd = "password";
out.println("Password is: " + passwd + ".<br>");
 
// Create a new instance of MessageDigest, using MD5. SHA and other
// digest algorithms are also available.
MessageDigest alg = MessageDigest.getInstance("MD5");
 
// Reset the digest, in case it's been used already during this section of code
// This probably isn't needed for pages of 210 simplicity
alg.reset(); 
 
// Calculate the md5 hash for the password. md5 operates on bytes, so give
// MessageDigest the byte verison of the string
alg.update(passwd.getBytes());
 
// Create a byte array from the string digest
byte[] digest = alg.digest();
 
// Convert the hash from whatever format it's in, to hex format
// which is the normal way to display and report md5 sums
// This is done byte by byte, and put into a StringBuffer
StringBuffer hashedpasswd = new StringBuffer();
String hx;
for (int i=0;i<digest.length;i++){
	hx =  Integer.toHexString(0xFF & digest[i]);
	//0x03 is equal to 0x3, but we need 0x03 for our md5sum
	if(hx.length() == 1){hx = "0" + hx;}
	hashedpasswd.append(hx);
}
 
// Print out the string hex version of the md5 hash
out.println("MD5 version is: " + hashedpasswd.toString() + "<br>");
%>
</body>
</html>

i find this code, then i use this for my encryption with little modified, and in this tutorial said, this code is too old, and have some security issue, is there something wrong with this code? because i try it and it work well

i want to ask how about decrypt it?
i need to decrypt the password while my user forget the password, and i use it to send it for them

Re: How to do MD5 encryption in JSP for password login and registration?

Why do you want to send their password back to them? Doesn't that defeat the point?

If they forget their password, just reset it to some generated random password and send them that. Then they can change it to whatever they want.

Re: How to do MD5 encryption in JSP for password login and registration?

Quote:

Originally Posted by KevinWorkman

Why do you want to send their password back to them? Doesn't that defeat the point?

If they forget their password, just reset it to some generated random password and send them that. Then they can change it to whatever they want.

ooh yea! goodm nice advice man! i will start a new topic, since this topic is about MD5 encryption