4 ms·
If I had to roll my own crypto, and god help me if I had too. puts on tin foil hat I'd store the clear text passwords encrypted with AES-256 CBC mode (still wo
by valarauca1 13y ago
If I had to roll my own crypto, and god help me if I had too. puts on tin foil hat
I'd store the clear text passwords encrypted with AES-256 CBC mode (still works right?). Next their would 3 databases, on 3 separate servers (hopefully physical ones). Server 1 passwords + salt, server 2 key 1, server 3 key 2. bcrypt(Diffe-hellman(key1,key2), salt) = AES standard key.
Basically I wouldn't. I couldn't sleep good at night storing financial data.
- pilom 13y agoWould you have a 4th database of your own site's usernames and scrypt(local password) used for logging in?
- valarauca1 13y agoYes but I figured that went without saying.