[Zope] DO NOT: Encrypt/decrypt passwords in zope using rotor ;-)

[Peter Sabaini]

Stefan H. Holek wrote:
> Hi Anitha!
> 
> Zope provides the AccessControl.AuthEncoding module for password 
> encryption and validation. The default algorithm, SSHA, is very secure.

IANACE (i am not a crypto expert) but AuthEncoding only provides one-way 
hashes i think?

if you need to do it both ways http://eevolved.com/cryptkit/ provides a 
Rijndael cipher implementation, or look at the vaults crypto page: 
http://py.vaults.ca/parnassus/apyllo.py/514463245.94738404

  - peter.


> Stefan
> 
> 
> --On Dienstag, 12. August 2003 05:31 +0000 Anitha George 
> <anithageorge27 at hotmail.com> wrote:
> 
>>        Passwords can be encrypted/decrypted using Rotor-a biult in python
>> module...More details given in python documentation...Not much sure now
>> secure it is..
>>
>> Anitha
> 
>> _________________________________________________________________
>> Help STOP SPAM with the new MSN 8 and get 2 months FREE*
> 
> 
> Yeah, sure ;-)

you gotta have faith!
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3461 bytes
Desc: S/MIME Cryptographic Signature
Url : http://lists.zope.org/pipermail/zope/attachments/20030812/731580d7/smime.bin