Hashes are a one-way function. There is no way to 'unhash' a hashed string - that goes for MD5 and every other hash function.<div><br></div><div>FreeSWITCH will calculate the hash from the plaintext password and then compare that hash to the one sent by the user.<br>
<div><br></div><div>See <a href="http://en.wikipedia.org/wiki/Digest_access_authentication">http://en.wikipedia.org/wiki/Digest_access_authentication</a> for an explanation of the process.<br><div><br></div><div>-Steve</div>
<div><br></div><div><br><br><div class="gmail_quote">On 26 June 2013 11:38, Peter Stevens <span dir="ltr"><<a href="mailto:Peter.Stevens@bbc.co.uk" target="_blank">Peter.Stevens@bbc.co.uk</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div lang="EN-GB" link="blue" vlink="purple">
<p></p>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt">I have been asked the following question:<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt"><u></u> <u></u></span></p>
<p class="MsoNormal">If the password negotiation uses digest authentication with a MD5 hash – is this compared with a one time hash in the passwords.xml or does some other process take place to unhash this to compare with the actual password?<u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:12.0pt"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt">I had a look in sofia_reg.c but didn’t see anything obvious and the forum list didn’t show anything on this subject.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt">Thanks for any help on this.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt">Best regards,<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt">Peter Stevens<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt"><u></u> <u></u></span></p>
</div>
<p></p>
<p> </p>
<p>----------------------------<br>
<font size="3" face="Times New Roman"><font size="3" face="Times New Roman"><font size="3" face="Times New Roman"><br>
<font size="3" face="Times New Roman"><a href="http://www.bbc.co.uk" target="_blank">http://www.<span>bbc</span>.<span>co</span>.<span>uk</span></a><br>
This e-mail (and any attachments) is confidential and may contain personal views which are not the views of the
<span>BBC</span> unless specifically stated.<br>
If you have received it in error, please delete it from your system.<br>
Do not use, copy or disclose the information in any way nor act in reliance on it and notify the sender immediately.<br>
Please note that the <span>BBC</span> monitors e-mails sent or received.<br>
Further communication will signify your consent to this.</font></font></font></font></p>
<p>---------------------</p>
</div>
<br>_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
FreeSWITCH-powered IP PBX: The CudaTel Communication Server<br>
<a href="http://www.cudatel.com" target="_blank">http://www.cudatel.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://wiki.freeswitch.org" target="_blank">http://wiki.freeswitch.org</a><br>
<a href="http://www.cluecon.com" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<br></blockquote></div><br></div></div></div>