RE: Encrypting passwords

Tech-Archive recommends: Fix windows errors by optimizing your registry

There were a few suggestions in this thread to use XOR to encrypt/decrypt
password. I do not recommend that you follow those suggestions. Programmers
worth their salt do not recommend XOR to encrypt data. Data encrypted using
XOR can be decrypted by any fairly competent hackers.

I recommend you use the Windows crypto APIs to perform encryption. These
APIs have been carefully designed and vetted by cryptographic experts. For
example, you can hash the user password in MD5 or SHA1 digest and store the
digest. When user next enter the password, you can hash the password and
compare the hash with the previously stored digest.

"SD" wrote:

> Hi,
>
> I have an application where a user enters a password, which is to
> be used the next time the user wants to invoke the application.
> The password is to be encrypted before being stored in the
> registry. Since I'm new to encryption, could someone point
> me to some sample to do this? I would just need simple XOR
> encryption/ decryption.
>
> TIA,
> SD
.

Relevant Pages

  • Encryption A97
    ... I've been playing with some encryption code from the web ... and have been pleased with this sample code from Rob Bovey. ... Essentially it takes a string and puts it through an XOR process and saves ...
    (microsoft.public.access.modulesdaovba)
  • Re: ECB-Counter AES mode
    ... sequential counter value over the plain text block with XOR prior ... to AES encryption and removing the counter value after AES ... not removing the correlation entirely. ... xoring into the plaintext and xoring the hash out after the encryption. ...
    (sci.crypt)
  • Re: ECB-Counter AES mode
    ... sequential counter value over the plain text block with XOR prior ... to AES encryption and removing the counter value after AES ... not removing the correlation entirely. ... xoring into the plaintext and xoring the hash out after the encryption. ...
    (sci.crypt)
  • Re: Fast Encryption
    ... However, the program could easily be used to store passwords, etc. ... When I started using encryption for my shareware protection, I was struck by how many partially documented solutions there are. ... If only casual encryption is required, you won't find much faster than a simple XOR algorithm. ...
    (microsoft.public.vc.mfc)
  • Re: Data Encyption
    ... it says it is Vignere with XOR? ... Public Function VignereCode(ByVal InText As String, ... >> encryption, which allows you to encrypt data in an access table. ...
    (microsoft.public.access.security)