Re: User Passwords and Crypto API

Be careful where you look for examples of using CryptoAPI. Most will fall
into the trap of encrypting text in the ANSI code page, and of holding the
encrypted form in a VB String variable. The following link explains why this
is bad:
http://www.google.ie/groups?safe=off&as_umsgid=EE5ABEF5-65E7-4D1D-B36C-1F0E6521B445@xxxxxxxxxxxxx&lr=lang_en&hl=en

Tony Proctor

"Padmini" <Padmini@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:8CE78072-AD9F-409A-876E-5933C8D91D3F@xxxxxxxxxxxxxxxx
> Hi there,
>
>
> Currently users of our system (PARIS) which is built using VB 6.0 and SQL
> 2000 need to enter a username and password before they can use the system.
> The username and password are stored in a table in SQL 2000. The makes
the
> system unsecure.
>
> I am therefore looking at ways to encrypt the passwords and then save them
> to the database and then decrypt them.
>
> I understand that the API call Crypto does this.
>
> Please can somebody give me an example as how I can use this.
>
> Are there any other ways of doing this?
>
> Any help will be appreciated.
>


.

Relevant Pages

  • Re: anyone used disk encryption & fingerprint id software?
    ... altho we have all been bitten by software that doesnt work or work ... i presumed that encrypting the drive would avoid having the data 'readable' ... the fingerprint thing is a lazy man's way of trying to get a strong username ... >>also using a fingerprint scanner to generate my username/passwords so ...
    (microsoft.public.windowsxp.general)
  • Re: anyone used disk encryption & fingerprint id software?
    ... loose the key to unencrypt the data it is lost forever. ... If you use EFS you must ... > i presumed that encrypting the drive would avoid having the data ... >>>in a username and password, does the scanner somehow create both of ...
    (microsoft.public.windowsxp.general)
  • Re: How Secure Are Username Token Encrypted Messages
    ... > My question is Encrypting the username token using the public key of the ... > "Martin Kulov" wrote: ... the public key of X.509 certificate from the receiver. ...
    (microsoft.public.dotnet.framework.webservices.enhancements)
  • Re: Coding encryption logic in VBScript
    ... I corrected the code, but still not encrypting. ... in SQL Server Management Studio, ... Connection.Execute SQLQuery ... using the Symmetric key and EncryptByKey Method. ...
    (microsoft.public.scripting.vbscript)
  • Encoded WebService SOAP Header?
    ... I would like to make these updates using Web Services. ... an attacker could simply replicate the username / password since I am unable ... Or is there another approach to encrypting these? ... I have tight control over both the web server and my client updating ...
    (microsoft.public.dotnet.framework.aspnet.webservices)