S Squiffy Active Member Licensed User Longtime User Aug 24, 2015 #1 Is there an implementation of an encryption technique suitable for storing passwords in a DB? One way BCrypt seems to be recommended in most places I've read, and I see in the B4A section a user called "hdtvirl" created one but I can't find it anywhere. jB4XEncryption appears to provide a 2-way encrypt/decrypt library so I assume that's unsuitable for passwords?
Is there an implementation of an encryption technique suitable for storing passwords in a DB? One way BCrypt seems to be recommended in most places I've read, and I see in the B4A section a user called "hdtvirl" created one but I can't find it anywhere. jB4XEncryption appears to provide a 2-way encrypt/decrypt library so I assume that's unsuitable for passwords?
Erel B4X founder Staff member Licensed User Longtime User Aug 24, 2015 #2 bcrypt is not an encryption method. It is a one way function. A proper implementation of SHA-512 with salt is available in the login server example. See more information here: https://www.b4x.com/android/forum/threads/server-login-system-filters-tutorial.39020/#content Upvote 0
bcrypt is not an encryption method. It is a one way function. A proper implementation of SHA-512 with salt is available in the login server example. See more information here: https://www.b4x.com/android/forum/threads/server-login-system-filters-tutorial.39020/#content
S Squiffy Active Member Licensed User Longtime User Aug 24, 2015 #3 Thanks for responding. Sorry my question was poorly worded re encryption/oneway hash. The two libraries your login example requires - are they only available to purchasers of B4A? The page says I don't have permission when I click on the links for them. Upvote 0
Thanks for responding. Sorry my question was poorly worded re encryption/oneway hash. The two libraries your login example requires - are they only available to purchasers of B4A? The page says I don't have permission when I click on the links for them.
