Peter Boughton wrote:
> Odd.
> 
> You can get one or two =s used by the CF encryption for padding encoded 
> values to a certain length, so that might explain the character itself, but 
> not really /why/ it's happening.
> 
> What is in Request.encCode?

It's a random string that's stored in another table to keep it unique 
for each record. It's a short string though - usually something like 
"ac74rn23".


> Is it definitely constant between encrypt and decrypt?

Yup

I've tested 100 times, and the client has tested even more, and any 
combination of 5 numbers encrypts/decrypts correctly, as long as the 
last number isn't a "2".

This is an older app and because of the legacy data I'm not in a 
position of changing the algorithm used at the moment. It's not 
super-sensitive information that would crash the world if it leaked or 
anything anyway. Nothing associated with credit cards or such.

So, two current solutions!!
1. Tell the client that if it's a 4 digit number with a "=" tagged on 
the end, then that's a "2"! (already implemented)
2. rereplace the "=" with a "2" after decrypt - heh...

For the life of me, I see NO reason why/how this could be happening! 
It's a very odd thing indeed!



~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
ColdFusion MX7 by AdobeĀ®
Dyncamically transform webcontent into Adobe PDF with new ColdFusion MX7. 
Free Trial. http://www.adobe.com/products/coldfusion?sdid=RVJV

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:274248
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4

Reply via email to