client authentication - password encryption

From: "G(dot) J(dot) Walsh" <gjwalsh(at)dscdirectionalservices(dot)com>
To: pgsql-novice(at)postgresql(dot)org
Subject: client authentication - password encryption
Date: 2007-11-07 22:05:44
Message-ID: 1194473144.10288.19.camel@www.dscdirectionalservices.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-novice

In my application, a client will complete a fairly involved
registration form containing more personal information than usual. The
form content will be encrypted (https) and will contain the client's
choice of password.

Previously, under MySQL, I used 2-way encryption, inserting the user and
password into the client table like so:

$insert = "INSERT INTO client_table (protocol,tpwd) VALUES ('$protocol',
AES_ENCRYPT('$tpwd','$salted'));

This allowed me to decrypt the password when the inevitable happens and
the testee loses his password. That gave me protection for the password,
because administration of the tests involved will not require ssl -
being nothing more than a tansfer of raw item responses.

>From what I can see, AES_ENCRYPT seems to be closely hitched to MySQL.
Can I not avail myself of this function in PostgreSQL?

George

Responses

Browse pgsql-novice by date

  From Date Subject
Next Message Robert Bernabe 2007-11-08 03:56:38 Debugging question ...
Previous Message Nick Nick 2007-11-06 07:55:47 Re: Dates with unknown month and/or day