Beefy Boxes and Bandwidth Generously Provided by pair Networks
Clear questions and runnable code
get the best and fastest answer
 
PerlMonks  

encryption and decryption

by Anonymous Monk
on Apr 01, 2008 at 10:15 UTC ( [id://677726]=perlquestion: print w/replies, xml ) Need Help??

Anonymous Monk has asked for the wisdom of the Perl Monks concerning the following question:

Hi Monks,
Can please tell me some module for password encrypted and decrypted

Replies are listed 'Best First'.
Re: encryption and decryption
by bingos (Vicar) on Apr 01, 2008 at 10:30 UTC

    If it is UNIX type passwords you are thinking of, then you don't actually decrypt, but rather encrypt and compare

    See crypt()

    I have also used Crypt::PasswdMD5 in the past with much success.

Re: encryption and decryption
by poolpi (Hermit) on Apr 01, 2008 at 10:31 UTC
Re: encryption and decryption
by radiantmatrix (Parson) on Apr 01, 2008 at 15:02 UTC

    First, understand that security is harder than you think it is. I'm a security professional, and every day I still discover that security is harder than I thought in some way.

    It concerns me that you're asking about "decryption" for passwords. Password-based authentication systems that are any kind of secure never decrypt anything. Instead, they store a one-way (i.e. irreversible) hash of the password. Then, when a user enters a password, the same hash algorithm is applied to it -- if that hash matches the stored hash, then the passwords were the same.

    If this is what you want to do, I strongly suggest looking at using Crypt::Eksblowfish::Bcrypt. The Bcrypt algorithm is similar to crypt, but has several very nice security features. This algorithm is the default for FreeBSD as well -- widely considered one of the most security-conscious OS's available.

    On the off chance that you are really needing to store an encrypted password that needs to be decrypted (for example, if you'll be using the password to log into some service automatically, and want to store it securely), I suggest using AES; this is also known as Rijndael. You'll need Crypt::CBC and Crypt::Rijndael for this purpose.

    <radiant.matrix>
    Ramblings and references
    The Code that can be seen is not the true Code
    I haven't found a problem yet that can't be solved by a well-placed trebuchet

Log In?
Username:
Password:

What's my password?
Create A New User
Domain Nodelet?
Node Status?
node history
Node Type: perlquestion [id://677726]
Approved by bingos
help
Chatterbox?
and the web crawler heard nothing...

How do I use this?Last hourOther CB clients
Other Users?
Others pondering the Monastery: (5)
As of 2024-03-19 09:59 GMT
Sections?
Information?
Find Nodes?
Leftovers?
    Voting Booth?

    No recent polls found