PHP: Safe way to store decryptable passwords

Posted by Jammer on Stack Overflow See other posts from Stack Overflow or by Jammer
Published on 2010-03-31T19:50:18Z Indexed on 2010/03/31 19:53 UTC
Read the original article Hit count: 230

I'm making an application in PHP and there is a requirement that it must be possible to decrypt the passwords in order to avoid problems in the future with switching user database to different system.

What encryption/decryption algorithm would you suggest? Is it good idea to just store the encrypted value and then compare the future authentication attempts to that value? Are the passwords still as safe as MD5/SHA1 when the private key is not available to the attacker (Hidden in USB drive for example)? I should still use salting, right?

What encryption libraries should I use for PHP?

© Stack Overflow or respective owner

Related posts about security

Related posts about password-encryption