Password encyption

[gyap88]

Hi everyone, I m using visual studio 2005 and microsoft sql server to build my project.

My website consist of a registration page. I m interested to know how to save the text in the password field in a encrypted form in the mssql database.
What will be the appropriate data type of the column in the database?

[kenobewan]

Depends on the method of encryption:
Encrypting Sensitive Data in a Database

[gyap88]

Depends on the method of encryption:
Encrypting Sensitive Data in a Database

Sorry the link is invalid..

[kenobewan]

Sorry the link is invalid..

My bad - http://aspnet.4guysfromrolla.com/articles/081705-1.aspx

[wimpos]

For storing passwords you should use an algorithm that has one way encryption, so it can be decrypted. md5 or hash , ...

User registers:
- choose password: mypass
- Hashed: o5d4g44f
- stored in database

User logs in
- user types password: mypass
- password hashed: o5d4g44f
- check if hash in database is the same

[kevin111]

MD5 is good, when the message is encrypted, the length of the encrypted message will be a constant, 16 or 32
decryption is not needed, when a user submit a password, encrypt it, then compare with the encrypted password saved in database

[CODE=cpp] public static string GetMD5(string source)
{
string result = "";

MD5 md5 = MD5.Create();
byte[] buffer = md5.ComputeHash (System.Text.En coding.Unicode. GetBytes(source ));
for (int i = 0; i < buffer.Length; i++)
{
result += buffer[i].ToString("X2") ;
}

return result;
}[/CODE]

don't forget "using System.Security .Cryptography"