From: "Martin Boßlet" <martin.bosslet@...>
Date: 2012-03-27T20:19:26+09:00
Subject: Re: Need help with MD5 hashs

> WOW !
>
> Son simple !
>
> Thanx a million !
>
> Jonathan
>

You're welcome!

As an advice, it seems like your password storage scheme relies on
MD5-hashed passwords with no salt? If so, you should probably consider
to go for something more sophisticated since you are in a transition phase
now anyway. MD5 with no password is almost trivial to break these days.
If you don't believe me, google for '48bb6e862e54f2a795ffc4e541caed4d'.
See, you recovered a password in mere seconds ;)
For something more secure, you could have a look at PBKDF2 as described in
http://www.ruby-doc.org/stdlib-2.0/libdoc/openssl/rdoc/OpenSSL/PKCS5.html
or use https://github.com/codahale/bcrypt-ruby if you have no OpenSSL
available on your system.

Regards,
Martin