search

alainloisel / ehost

Automatically exported from code.google.com/p/ehost
0 stars 0 forks source link

[password login] password encrypt #268

Open GoogleCodeExporter opened 8 years ago

GoogleCodeExporter commented 8 years ago 
While sending password from eHOST to Annotation Admin, password need to be 
encrypted.

Original issue reported on code.google.com by jwleng@gmail.com on 31 Jul 2012 at 5:24

GoogleCodeExporter commented 8 years ago 
The encryption algorithm we chosen is PBE with MD5 and TripleDES. It's called 
PBEWithMD5AndTripleDES in Java. 

See authenticate user examples below (returns userId to use in eHost):
Note that the password needs to be encrypted with the following 
algorithm/password (see below).  

The authenticateUser WS at present only checks userName, not password, but that 
will be changing very shortly.

encryptorAlgorithm=PBEWithMD5AndTripleDES
encryptorPassword=passw0rd

Original comment by jwleng@gmail.com on 31 Jul 2012 at 5:27

Attachments:

GoogleCodeExporter commented 8 years ago 
encryption function is implemented.

salt：1168d76e6c9e466
password：passw0rd
before encrypt: string:PBE数据
before encrypt: byte[](BYTE):504245e695b0e68da
before encrypt: byte[](HEX):504245E695B0E68DAE

ENCODED: byte[](HEX):BCEA818FC04903558CF0774A64A41DBE
ENCODED: byte[](byte):[B@19968e23

Original comment by jwleng@gmail.com on 31 Jul 2012 at 8:08

GoogleCodeExporter commented 8 years ago 
problem and feature works:

* Confirm we have the same SALT and ITERATION-COUNT.

Original comment by jwleng@gmail.com on 31 Jul 2012 at 8:09

GoogleCodeExporter commented 8 years ago 
release a new version for test 1.040

Original comment by jwleng@gmail.com on 1 Aug 2012 at 8:18