Using asymmetric encryption to secure passwords

后端 未结 5 1521
伪装坚强ぢ
伪装坚强ぢ 2021-02-04 22:48

Due to our customer\'s demands, user passwords must be kept in some \"readable\" form in order to allow accounts to be converted at a later date. Unfortunately, just saving hash

5条回答
  •  清歌不尽
    2021-02-04 23:26

    There is not enough information in the question to give any reasonable answer. Anyway since you disable padding there is a good chance that one of the attacks described in the paper "Why Textbook ElGamal and RSA Encryption are Insecure" by D. Boneh, A. Joux, and P. Nguyen is applicable.

    That is just a wild guess of course. Your proposal could be susceptible to a number of other attacks.

提交回复
热议问题