Rewarding Challenge AS/400

["Steve Glanstein" <mic@xxxxxxxxx>]

>The encryption method **may** change from release to release, but between
>machines on the same release, and from what I've played with, it **seems**
>the same method but who really knows ?

It is the same method. For example, the encrypted password for user TEST,
password TEST is 50C8C4C683D60CE2. This is the same on V1R2 through V4R3.

This encryption is done with both user id and password. No other parts are
needed. For example, if you replace another password for TEST with the
above hex then TEST will have a password of TEST.

Unfortunately the software vendor (you know who I mean!)doesn't have
enough confidence in the encryption technique to permit public analysis
and verification that it is truly one way.

The answer to people who can crack the AS/400 password...I'll send them the
encrypted password and see if they can decrypt it! This was done several
times with PGP and the network went silent.

Steve Glanstein
mic@aloha.com


+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---