views:

525

answers:

2

I know you can compare the length but many hash types have the same lengths.

So with just knowing that it is a hash is there a way to identify the type and also if its salted?

example of the hash that I am working with is:

hash=2bf231b0e98be99a969bd6724f42a691
hash=4ac5a4ff764807d6ef464e27e4d1bee3
hash=4d177cec31d658ed22cc229e45d7265e

thanks for any insight

+3  A: 

No; you pretty much can only identify it by the length.

-- Edit:

Obviously, however, if you have access to the program generating the hashes, and you can provide input, then you can compare with some result you also calculate (assuming you know the salt.

If you're really stuck, you can also infer it from the language that's being used (i.e. if it's PHP, it's most likely MD5), and so on.

But from a technical point of view, there is no way to identify a hash; as it would be counter-productive to the goal of security :) (it would take up useless bits in the hash itself to do this identification).

Noon Silk
makes sense to me and thanks for the input!
evolvd
+1  A: 

That particular example is a 32 character alphanumeric representation, which is almost certainly MD5.

SHA-1 usually comes as a 40 character alphanumeric string (as does SHA-0)

MD5 and SHA-1 account for the vast majority of hashes you'll find in the wild.

skaffman