B4R Question B4r Encrypt / Decrypt Data

[takhmin77]

hi
i want to send parameter value to a web service for add values to database
(read a counter value from eeprom and save to server database )
my web service like this :
http://ip/mywebservice/service.asmx/SaveCode?code=123456

but i want encrypt code value (123456) .
like :
http://ip/mywebservice/service.asmx/SaveCode?code=sldkjhlkjhkjDFGHfzd1321k

is there any b4r library or function for encrypt value before send and where i recive value in my server , i decrypt it ?

 

[Erel]

Lets say that you encrypted the password and got xxxxxxxx. How will it help you? Someone will monitor the network traffic and use the encrypted code to make the same request. The original password no longer matters.

 

[takhmin77]

hi
thanks for your answer
i want generate a one time password that is valid for my server and encrypt it
when server recives password , decrypts password and then it authenticates it (by an algorythm between client and server) , if decrypted password is valid , save URL values to its database.
i save recived password to server database , and when someone send again that password , i search in database and when i found that password ,message it "Password Not Valid" ..

is there any way to encrypt password ?

 

[Erel]

Yes:

Sub Process_Globals
   Public Serial1 As Serial
End Sub

Private Sub AppStart
   Serial1.Initialize(115200)
   Log("appstart")
   Dim encrypted() As Byte = EncryptDecrypt("abcdef", "d23,")
   Log(encrypted)
   Log(EncryptDecrypt(encrypted, "d23,"))
End Sub

Private Sub EncryptDecrypt(Text() As Byte, Pattern() As Byte) As Byte()
   Dim res(Text.Length) As Byte
   For i = 0 To Text.Length - 1
       res(i) = Bit.Xor(Text(i), Pattern(i Mod Pattern.Length))
   Next
   Return res
End Sub

This method is good for encryption of "random" data such as passwords. It is less secure if you use it with more predictable data such as a long text made of words.

 

[takhmin77]

thanks for you helping erel .

do you have any recomendation for send secure data to webservice (such as ssl ) ?

 

[Erel]

You can use SSL. See rHttpUtils.