BlackBox - Flash Secure Login

Version 0.1, Updated March 20, 2008
  • Compatibility: ActionScript 3.0
  • File Size: About -Kb
  • Change Log

Download Now (0.1)

You need to upgrade your Flash Player
This site requires atleast version 9.
Get Adobe Flash Player

Description

BlackBox is a Flash-based login application. We built this much for the same reasons Comet was. We didn't have anyway of doing a secure (read SSL) connection so we made our own next best thing. Whats funny is that in the end, the method we "ingeniously" came up with is almost the exact same method used with POP servers to send email.

This is how the login works:

  1. Flash client first intiates a handshake by sending a random number (clientRand) to the server.
  2. The server generates it's own random number (serverRand) and grabs the difference (randDiff) between the two numbers.
  3. The difference (randDiff) is saved to the database for the user logging in and the server's random number is sent back to the client.
  4. The client calculates the same difference (randDiff) and then sends the username and an MD5 of the password salted with the difference (randDiff).
  5. The server then uses the username to pull randDiff and password for the user. Creates a hash salted with randDiff and compares what the client sent.
  6. If all is well, it returns success and the client continues onto to the secure page.

This is an old project that's basically a poor mans Diffe-Hellman key exchange done well before I knew what Diffie-Hellman even was. The username is demo and the password is password. Enjoy!

Features

Change Log

BlackBox 0.1 for AS3

BlackBox by Gabriel Mariani