comment on

There's been a discussion in my group about encrypting the passwords of people who log into the site. Similar to the one way encryption of Linux passwords.

Right now, the site stores the passwords in a seperate directory from the perl script to avoid the chance that someone may figure out how to read the directory contents. The password directory isn't readable by anyone except the running script.

We plan on shifting the site from a flat file storage scheme to a MySQL DB and will likely store the passwords in this database. At that point should we even store the passwords in this DB and if so, how do I encrypt it via Perl? I've thought about using MD5 or CRC32, but the passwords are likely to be very short, anywhere from 8 to perhaps 24 or so characters and I don't know if those two checks would be fine or not.

I did a search for password hashes, but naturally, hash has a different meaning in Perl and the results were not what I needed :( What should I be looking for out there? Is it fair to stick a link to my site here?

Thanks for you patience.

In reply to Ecrypting passwords by SavannahLion

Are you posting in the right place? Check out Where do I post X? to know for sure.
Posts may use any of the Perl Monks Approved HTML tags. Currently these include the following:
<code> <a> <b> <big> <blockquote> <br /> <dd> <dl> <dt> <em> <font> <h1> <h2> <h3> <h4> <h5> <h6> <hr /> <i> <li> <nbsp> <ol> <p> <small> <strike> <strong> <sub> <sup> <table> <td> <th> <tr> <tt> <u> <ul>
Snippets of code should be wrapped in <code> tags not <pre> tags. In fact, <pre> tags should generally be avoided. If they must be used, extreme care should be taken to ensure that their contents do not have long lines (<70 chars), in order to prevent horizontal scrolling (and possible janitor intervention).
Want more info? How to link or How to display code and escape characters are good places to start.


Welcome to the Monastery
	PerlMonks