Is there a way to decrypt CRC-96 encrypted string? I am testing a web application which stores the password in the database in CRC-96 encrypted format.
While I'm not familiar with CRC-96(ZIP) I'm assuming it is a longer version of CRC-32, but similar in it's function and implementation, so my answer is predicated on that.
CRC is essentially a one-way function. Like other hashes this is a lossy operation, resulting in an output of a pre-determined length. You could put in the word 'cat', or the entire contents of a novel, and the length of the CRC for each of those would be the same.
Due to this, there's no way to simply reverse the function. That doesn't mean it's totally secure though.
If the function produces a short result, it wouldn't be too difficult to brute force all the possible inputs until you found the password which produces that result, or a collision.
In non-cryptographically secure hash algorithms (I believe this to be the case for CRC-96(ZIP)), it's not difficult to find a collision. Then I could just take that collision, submit it to the application which calcualtes the CRC of it, then compares it to the database value, and you are then compromised.
Long story short, is you can't 'decode' a CRC, but you can find a collision, or the original through brute force.