Re: what login securityencription are good for struts...?

2007-11-13 Thread msg2ajay
hi, its a very nice example which u have sent but i have a doubt that as u are using salt(generation) adding to the encripting code that will be fine for registeration but what ab the login time how you are going to decript the data base code? and authenticate... and one more thing is

Re: what login securityencription are good for struts...?

2007-11-13 Thread Piero Sartini
its a very nice example which u have sent but i have a doubt that as u are using salt(generation) adding to the encripting code that will be fine for registeration but what ab the login time how you are going to decript the data base code? You do not need to decrypt - you just

Re: what login securityencription are good for struts...?

2007-11-13 Thread Ingo Villnow
Hi, A salt value is a random value that will combinated with a password, so both can be encrypted encrypt(salt+password) = hash Please read: http://en.wikipedia.org/wiki/Salt_%28cryptography%29 You don't have to decrypt any passwords. Yes, 'I am using hibernate to read/write on my database.

Re: what login securityencription are good for struts...?

2007-11-13 Thread Gary Affonso
msg2ajay wrote: hello friends, I am developing a struts+hibernate application which contains a login page. I am not sure of which tools or API's to use for logn Authentication and encription. Can any bady suggest me which is best for login Authentication and what way

what login securityencription are good for struts...?

2007-11-12 Thread msg2ajay
hello friends, I am developing a struts+hibernate application which contains a login page. I am not sure of which tools or API's to use for logn Authentication and encription. Can any bady suggest me which is best for login Authentication and what way can i proceed

Re: what login securityencription are good for struts...?

2007-11-12 Thread Ingo Villnow
Hello, i had the same task and I did the following: - my loginAction starts a method loginService. My service method calls the dao (for example userDAO) to get the encrypted password, which is saved in the database. Now my service method calls a method to encrypt the form given password (i take