Password encrypt/decrypt

[kalaiselvi.v]

i want to encrypt the password and store in the database.
i extract character find ascii value of that and changed that value and stored in the database.but when i use this it wont have much security.
can anyone help me for password encryption.i m using JSP+HTML

[vinod_javas]

use some algorithm for encryption...like RC4 algorithm

[peter_budo]

You can even create your own encryption/decryption algorithm. Put all the characters which are allowed to be in username & password into array. Pickup some number for example 4 and if you get "a" in username/password replace it with "e" and you have your algorithm. But yes there is plenty algorithm online, but be aware for some of them you have to pay and secondly you need your server admin get add for you. Also you shouold use servlets not only JSP's.

[tonakai]

Pickup some number for example 4 and if you get "a" in username/password replace it with "e" and you have your algorithm.

isn't it ceasar cipher :P

if you want to store passwords in db, i suggest you cryptographic hash functions

with hashing even if someone broke into your database they only see hashed-passwords...

many languages have hashing API's you can easily find them in their documentations or in the internet.

[meprasobh]

import javax.crypto.Cipher;
import javax.crypto.BadPaddingException;
import javax.crypto.IllegalBlockSizeException;
import javax.crypto.KeyGenerator;
import java.security.Key;
import java.security.InvalidKeyException;


public class EncriptAndDecript {

    private static String algorithm = "DESede";
    private static Key key = null;
    private static Cipher cipher = null;
    private static EncriptAndDecript obj = new EncriptAndDecript();

    private EncriptAndDecript() {
        try {
            key = KeyGenerator.getInstance(algorithm).generateKey();
            cipher = Cipher.getInstance(algorithm);
        } catch (Exception e) {
        }
    }

    public static EncriptAndDecript getInstance() {
        return obj;
    }

    public static byte[] encrypt(String input)
            throws InvalidKeyException,
            BadPaddingException,
            IllegalBlockSizeException {
        cipher.init(Cipher.ENCRYPT_MODE, key);
        byte[] inputBytes = input.getBytes();
        return cipher.doFinal(inputBytes);
    }

    public static String getEncryptStringValue(String input) throws InvalidKeyException,
            BadPaddingException,
            IllegalBlockSizeException {
        return new String(encrypt(input));
    }

    
    public static String decrypt(byte[] encryptionBytes)
            throws InvalidKeyException,
            BadPaddingException,
            IllegalBlockSizeException {
        cipher.init(Cipher.DECRYPT_MODE, key);
        byte[] recoveredBytes =
                cipher.doFinal(encryptionBytes);
        String recovered =
                new String(recoveredBytes);
        return recovered;
    }
}