RE: vbscript

["Dawes, Rogan (ZA - Johannesburg)" <rdawes () deloitte co za>]

There are any number of JavaScript MD5 implementations, as well as SHA-1
implementations. Google is your friend.

I'm assuming that you want to do this in the browser?

As far as generating Cryptographic numbers, have a look at SRP. It uses as
Java applet to do it in IE, but uses the NetScape liveConnect to do it
without the applet under Netscape/Mozilla.

http://srp.stanford.edu/demo/demo.html includes the applet, look in the
source of the page for the usage and location.

Rogan


-----Original Message-----
From: Cade Cairns [mailto:cairnsc () securityfocus com] 
Sent: 07 January 2003 08:11 PM
To: webappsec () securityfocus com
Subject: vbscript


Hello list,

I am looking for resources related to vbscript security and was hoping
some of you might have some to share. Also, I am curious if anyone might
have some idea of how to generate even weak cryptographic quality random
numbers or knowledge of a good MD5 implementation. Any help would be
greatly appreciated.

Regards,
Cade Cairns