Displaying 1 result from an estimated 1 matches for "cookie_crumbler".
2007 Mar 30
7
Some additional attacks on Cookie Session
...corrected easily. Some are much more
challenging. I think they all should demonstrate that creating a
crypto system is quite formidable.
Below is a simple proof of concept code to demonstrate #1. It''s
simple Ruby: an optimized native version could be expected to be 100
times faster.
# cookie_crumbler.rb
include ''base64''
include ''digest/sha2''
cookie = ARGV[0]
data, digest = cookie.split(''--'')
# You can replace this with any object supporting #each,
# such as a brute force generator
wordlist = File.open(''/usr/share/dict/words'&...