Post reply

development of encrypted password field

  • October 16, 2019 at 8:20 am

    #3689192

    I want to be able to:

    • encrypt a password column
    • display characters x & y (randomly selected) to the front end
    • validate an input with a true false.

    This is a legacy db / C# app.  I'm a SQL bod not a front end developer but I can find my way around with a lot of googling.

    Be grateful for any pointers on where to start with this requirement.  The encryption bit alone I can figure out, but the rest …

     

    Thanks in advance.

     

     

  • October 16, 2019 at 6:46 pm

    #3689399

    The second requirement, to display randomly selected characters to the front end, seems a bit odd.  Typically a password would be stored with a salted hash, not with encryption.  Theoretically no one but the person who needs to enter the password should ever know what it is.  If something's encrypted it can be decrypted.  If it is hashed, someone would need to know the salt and do a dictionary type attack to figure out the password.

    https://bornsql.ca/blog/how-to-really-store-a-password-in-a-database/

     

Viewing 2 posts - 1 through 1 (of 1 total)

You must be logged in to reply to this topic. Login to reply