Question

I’ve been asked to design back-end in php for a web app having ASP front-end. So I can’t really dig up those ASP files. I have the MySQL database – that’s it! The programmer who made the front-end isn’t responding.

How do I decode this? Or just this – “what’s the name of this encryption method?”

It looks something like HEX though.

Another sample – 0E0800160E0330595D57

 0  1  2  3  4  5  6  7  8  9
0E 0B 02 06 01
0E 08 00 16 0E 03 30 59 5D 57

UPDATE – When I change my password to “kachwa” (without quotes), it gets updated as 040E0C07180E in the database.

Answer 1

Each byte is xor’d with 0x6f.

PHP sample encryption:

function enc($pass)
{
  $enc = '';
  for ($i = 0; $i < strlen($pass); ++$i)
    $enc .= sprintf("%02x", ord($pass[$i]) ^ 0x6f);

  return $enc;
}

echo enc("kachwa"),"\n";

Output:

040e0c07180e

And for the sake of completeness:

function dec($pass)
{
  $dec = '';
  foreach (str_split($pass, 2) as $hex)
    $dec .= chr(hexdec($hex) ^ 0x6f);
  return $dec;
}

echo dec("040e0c07180e"),"\n";