Custom Login utf8 in password with privateKey

Post here your questions about Actionscript and Java server side extensions development.

Moderators: Lapo, Bax

Post Reply
overmind
Posts: 26
Joined: 11 May 2008, 08:27

Custom Login utf8 in password with privateKey

Post by overmind »

We are implementing a custom login function and we use the private key in the authentication process...There is a problem with utf-8 characters in the password (in this example it contains a german character)

password is : ööö
private key generated : Ogjk[APXqis}O
flash md5 sent MD5(privateKey + password): daafc84ed7894e7ce7214bc1fef0ce1b

server md5 created for check : 3dcc55897c2871f5558461ec9b808ea2

javascript third party tool that we used for this example created: daafc84ed7894e7ce7214bc1fef0ce1b

php md5() function created : 3dcc55897c2871f5558461ec9b808ea2

So we have 2 votes for the one MD5 and two votes on the other!

We dont have problems with most passwords but only with the utf8 ones...Is there something we could do?
User avatar
Lapo
Site Admin
Posts: 23438
Joined: 21 Mar 2005, 09:50
Location: Italy

Post by Lapo »

I have added your request in our bug database. We'll keep you updated.
Lapo
--
gotoAndPlay()
...addicted to flash games
User avatar
Lapo
Site Admin
Posts: 23438
Joined: 21 Mar 2005, 09:50
Location: Italy

Post by Lapo »

Could you also post some of the password that didn't work?
Lapo
--
gotoAndPlay()
...addicted to flash games
overmind
Posts: 26
Joined: 11 May 2008, 08:27

Post by overmind »

I already did:)
User avatar
Lapo
Site Admin
Posts: 23438
Joined: 21 Mar 2005, 09:50
Location: Italy

Post by Lapo »

Sure, sorry for overlooking.
We have found the problem with the Adobe corelib library. MD5 generated from multibyte strings seem to create problems and result incorrect.

We're looking for a workaround or a substitute library (e.g. as3crypto)
Lapo
--
gotoAndPlay()
...addicted to flash games
Post Reply