Re: Using encrypted passwords
| From: | Jason Wong | Date: | Mon, 20 Dec 2004 19:30:50 +0000 |
| Subject: | Re: Using encrypted passwords | ||
| References: | 1 2 3 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-204757@lists.php.net to get a copy of this message | ||
On Tuesday 21 December 2004 02:15, symbulos partners wrote:
> Sorry for the silly question, you are probably right.
Perhaps it would be better if you say what you are trying to achieve.
> Would it be possible to encrypt the whole file, so that the password could
> not be read?
Encryption is only useful for data that is "in transit" or "in storage". If
the data is "in use" then it needs to be decrypted. If you're storing (or
have) the means of decryption on the same system as where the encrypted data
resides and someone malicious was able to get into your system they would
have the encrypted data and also the means to decrypt it.
--
Jason Wong -> Gremlins Associates -> www.gremlins.biz
Open Source Software Systems Integrators
* Web Design & Hosting * Internet & Intranet Applications Development *
------------------------------------------
Search the list archives before you post
http://marc.theaimsgroup.com/?l=php-general
------------------------------------------
/*
"We ought to make the pie higher."
George W. Bush
February 15, 2000
Comment made in Columbia, South Carolina during presidential campaign.
*/