Re: Re: OODL: CFD: Leadership in the OpenCard Project

[Adrian Sutton]

Adrian:  How would you implement it so that the passwords remain 
safe while the cgi can be placed in the downloads folder (so others 
can make changes, bug fixes etc)?

MP0werd: that's easy, use a one way function like DES.

Adrian: Okay, I don't understand much of this, but I'm hoping I 
won't need to.  Just tell me (so I can be certain), using your 
scripts, there's no way to get the password even if I had a copy of 
the cgi and went through the scripts to find the formula used.  This 
sounds like what a one way function should be.

Adrian: Thanks for your help, anyone know of where to get a DES 
external?