I was thinking whether or not you can find the hash function(s) used if you have the original message and the hash. So assume that no salt is used during the hashing process, just multiple hashing and concatenation, e.g.

hash = SHA512(MD5(original) || SHA512(original))

So how could you find the right hashing process, if really no salt is used and the process does not depend on other things like system time etc.? Remember that the original and the hash are given. Is the only way to find the right hashing sequence brute force?


You can certainly narrow the possibilities down by just looking at the hash. MD5 spits out 128 bits and SHA-256, 256 bits. Beyond that, it would have to be brute force.

Not the answer you're looking for? Browse other questions tagged or ask your own question.