Hi guys. Some time ago I asked about the best way to encrypt a password.
Some of the recommendations I got was:

1) Generally for passwords you do not write a decrypt method for security
purposes  (eg you do not want people to be able to reverse engineer the
encrypted password easily)
2) put a little salt
3) There is http://www.squeaksource.com/Cryptography/PasswordHashingFFI
4) I should not decrypt password but instead I should compare both
encrypted versions to see if they are equal.

My scenario is the following. I need to store database passwords in text
files. So I don't want to let them as plain text. And while I understand
4), I think it's a different scenario than mine. I know that some database
driver may allow you to directly send the encrypted password. But still...I
have another similar scenario in which I have to store a password and then
send it (unencrypted)...so I kind of really need a bi-directional
encryption.

Now..I would try to avoid having an external library + FFI. Any ideas what
is the best thing I can do? And how could I solve 1) if I want
bidirectional like in my case?

Thanks in advance,

-- 
Mariano
http://marianopeck.wordpress.com

Reply via email to