FTP SSL MD4 Password Hash - WeOnlyDo Discussion board

FTP SSL MD4 Password Hash (wodFtpDLX / wodFtpDLX.NET)

by Fred, Tuesday, February 12, 2008, 18:02 (6130 days ago)

Hi,

I have a remote FTPS server I require connecting to via the wodFtpDLX library. The server uses the MD4 password encryption scheme.

I know I can connect OK as the connection works from VoyagerFTP.

How do I set the WOD library to do the MD4 encryption?

Thanks
V

Re: FTP SSL MD4 Password Hash

by wodSupport, Tuesday, February 12, 2008, 20:09 (6130 days ago) @ Fred

Fred,

which FTP server supports that? If we can test with something, I will see how easy/hard it would be to implement it to wodFtpDLX.

Regards,
Kreso

Re: FTP SSL MD4 Password Hash

by Fred, Tuesday, February 12, 2008, 21:14 (6130 days ago) @ wodSupport

Kreso,

I presume what is going on is described by this link:
http://www.smartftp.com/support/kb/s-key-password-encryption-f115.html
or even
http://en.wikipedia.org/wiki/S/Key

Unfortunately I don't know what server it is. It's a remote one I have no control over. I can ask though.

Could this be done using any of the FTP events?

Thanks

V

Re: FTP SSL MD4 Password Hash

by Fred, Wednesday, February 13, 2008, 00:08 (6129 days ago) @ Fred

Update:

Everything required can be found in java script here:
http://www.ocf.berkeley.edu/~jjlin/jsotp/

For now I can use the PreTranslateReplyEvent to catch the seed and iterations to use in the PreTranslateCommandEvent to translate the PASS <password> Command into PASS <6 word MD4 hashed password> .

Ideally this would be better as an option in the library, so consider this a feature request :)

Cheers
V

Re: FTP SSL MD4 Password Hash

by wodgrof, Wednesday, February 13, 2008, 22:02 (6128 days ago) @ Fred

Fred,

We successfully implemented one-time password authentication in wodFtpDLX but the feature still isn't available in public release. Please open a ticket on http://www.weonlydo.com/index.asp?helpdesk=1 so we can send you a test version that you can try out and let us know if it matches your needs.

Regards,
Grof