Encrypt hashed passwords?

Posted by Industrial on Stack Overflow See other posts from Stack Overflow or by Industrial
Published on 2010-05-12T09:25:04Z Indexed on 2010/05/12 10:24 UTC
Read the original article Hit count: 155

Filed under:

encryption

|

salt

|

hash

|

database

Hi everyone,

Is it common sense to encrypt hashed&salted passwords that are stored in a database with a strong encryption (AES 192 or so) or are we just aiming for the stars?

Of course, the encryption key will not be in the database itself, but will be kept at a safe place.

Thanks a lot!

Related posts about encryption

SQL SERVER – History of SQL Server Database Encryption

as seen on SQL Authority - Search for 'SQL Authority'
I recently met Michael Coles and Rodeney Landrum the author of one of the kind book Expert SQL Server 2008 Encryption at SQLPASS in Seattle. During the conversation we ended up how Microsoft is evolving encryption technology. The same discussion lead to talking about history of encryption tools in… >>> More
Encryption is hard: AES encryption to Hex

as seen on Stack Overflow - Search for 'Stack Overflow'
So, I've got an app at work that encrypts a string using ColdFusion. ColdFusion's bulit-in encryption helpers make it pretty simple: encrypt('string_to_encrypt','key','AES','HEX') What I'm trying to do is use Ruby to create the same encrypted string as this ColdFusion script is creating. Unfortunately… >>> More
Encryption Product Keys : Public and Private key encryption

as seen on Stack Overflow - Search for 'Stack Overflow'
I need to generate and validate product keys and have been thinking about using a public/private key system. I generate our product keys based on a client name (which could be a variable length string) a 6 digit serial number. It would be good if the product key would be of a manageable length… >>> More
Confused about encryption with public and private keys (which to use for encryption)

as seen on Stack Overflow - Search for 'Stack Overflow'
I am making a licensing system when clients ask my server for a license and I send them a license if they are permitted to have one. On my current system I encrypt the license using a single private key and have the public key embedded into the client application that they use to decrypt the license… >>> More
Software tools to automatically decrypt a file, whose encryption algorithm (and/or encryption keys)

as seen on Stack Overflow - Search for 'Stack Overflow'
I have an idea for encryption that I could program fairly easily to encrypt some local text file. Given that my approach is novel, and does not use any of the industry standard encryption techniques, would I be able to test the strength of my encryption using 'cracker' apps or suchlike? Or do all… >>> More

Developer IT

Encrypt hashed passwords? - Developer IT

Encrypt hashed passwords?

encryption

salt

hash

database

Related posts about encryption

SQL SERVER – History of SQL Server Database Encryption

Encryption is hard: AES encryption to Hex

Encryption Product Keys : Public and Private key encryption

Confused about encryption with public and private keys (which to use for encryption)

Software tools to automatically decrypt a file, whose encryption algorithm (and/or encryption keys)

Related posts about salt

Why is a password salt called a "salt"?

Salt question - using a "random salt"

Generating a salt in PHP

Salt, passwords and security

salt and rainbow table

Categories cloud