Page 1 of 1

Custom Login utf8 in password with privateKey

Posted: 11 Oct 2010, 19:49
by overmind
We are implementing a custom login function and we use the private key in the authentication process...There is a problem with utf-8 characters in the password (in this example it contains a german character)

password is : ööö
private key generated : Ogjk[APXqis}O
flash md5 sent MD5(privateKey + password): daafc84ed7894e7ce7214bc1fef0ce1b

server md5 created for check : 3dcc55897c2871f5558461ec9b808ea2

javascript third party tool that we used for this example created: daafc84ed7894e7ce7214bc1fef0ce1b

php md5() function created : 3dcc55897c2871f5558461ec9b808ea2

So we have 2 votes for the one MD5 and two votes on the other!

We dont have problems with most passwords but only with the utf8 ones...Is there something we could do?

Posted: 18 Oct 2010, 13:24
by Lapo
I have added your request in our bug database. We'll keep you updated.

Posted: 18 Oct 2010, 14:47
by Lapo
Could you also post some of the password that didn't work?

Posted: 01 Nov 2010, 22:06
by overmind
I already did:)

Posted: 02 Nov 2010, 10:22
by Lapo
Sure, sorry for overlooking.
We have found the problem with the Adobe corelib library. MD5 generated from multibyte strings seem to create problems and result incorrect.

We're looking for a workaround or a substitute library (e.g. as3crypto)