Login Encryption

[Arun Christopher]

I have a page where the user logs into the system through an iframe. i am encrypting the password field with md5 using javascript when the form is submitted. I have not implemented ssl(https) for the page. Is this secure enough for my page? i fear whether hacking techniques like packet sniffing can still read my encrypted password? I tried implementing ssl for the iframe but i couldnt.

[Ulf Dittmer]

I tried implementing ssl for the iframe but i couldnt.

What did you try, and how didn't it work?

[Arun Christopher]

I am unable to get the form values in my action(struts) while submitting the iframe form with https. Moreover some javascript functions stop working. Google results also suggests the incompatibility of ssl and iframe. I just want to know whether encrypting a string(password) with md5.js(say) and submitting the form can prevent packet sniffing and related technologies crack or view my password?
[ December 02, 2008: Message edited by: Arun Christopher ]

[K Aditi]

encrypting a string(password) with md5.js(say) and submitting the form can prevent packet sniffing and related technologies crack or view my password?

MD5 is a hashing algorithm.It is not meant for encryption.It is a one way function.

[Arun Christopher]

Originally posted by K Aditi:

MD5 is a hashing algorithm.It is not meant for encryption.It is a one way function.

Hashing algorithms are used for encryption worldwide. MD5 and sha-1 are the widely used ones.

[Ulf Dittmer]

Hashing algorithms are used for encryption worldwide.

It would be less confusing to say "... for one-way encryption...". Most often the term encryption is used to mean two-way (reversible) encryption, and hashes are not reversible.