Re: Membership - how to change from clear-text to encrypted?

Hi,

why do you want to encrypt them as opposed to store the hash -

hashing is much easier - non reversible and you don't need a key...

I guess the easiest is to write a little programm that calls Membership.CreateUser for each of your accounts.

---------------------------------------
Dominick Baier - DevelopMentor
http://www.leastprivilege.com

Dominick,

Thanks for the response. We're looking to encrypt the existing
passwords for existing users. We're trying to move all of the users,
old and new to encrypted passwords.

Paul

"Dominick Baier [DevelopMentor]" wrote:

Encrypted or Hashed?

If encrypted - why?

---------------------------------------
Dominick Baier - DevelopMentor
http://www.leastprivilege.com
Hello,

We have an existing site with members and we're using the default
membership system for ASP.NET 2.0.

The original developer set up membership with clear-text passwords
and we'd like to change to enrypted passwords. Does anyone know how
to change the member's passwords behind the scenes to be the same
password they had before, but enrypted? We'd like to do it for them
so that the user's don't have to do anything and can just log in as
normal.

Any ideas on how to solve this? We've done a bunch of research on
how the membership system derives the encrypted passwords so that we
can just mimick it in code, but we've been unable to make it work.

Thanks,

Paul



.

Relevant Pages

  • Re: Security package for an individual in a hostile country
    ... Note that any advice you get here is given by armchair generals. ... Used to encrypt and/or hide your files. ... I'm assuming that the hostile government ... This program saves your passwords and has a ...
    (sci.crypt)
  • Re: Create hash with AES?
    ... > files, but also email, and text such as passwords... ... the AES is the most sensible choice. ... However if you're going to encrypt government data with it, ... would be wise to use a public/private key pair on a smart card. ...
    (microsoft.public.dotnet.security)
  • Re: Security package for an individual in a hostile country
    ... Used to encrypt and/or hide your files. ... I'm assuming that the hostile government ... I believe there are Firefox extensions that ensures the Google Mail ... This program saves your passwords and has a ...
    (sci.crypt)
  • Re: Security package for an individual in a hostile country
    ... Used to encrypt and/or hide your files. ... I'm assuming that the hostile government ... I believe there are Firefox extensions that ensures the Google Mail ... This program saves your passwords and has a ...
    (sci.crypt)
  • Re: Solaris /etc/shadow - NP vs. *LK*
    ... >encrypt to 13 characters on Solaris and several other brands. ... Last login: Sat May 10 17:37:57 from localhost ... Also, in recent S9, passwords can encrypt to linger strings using ...
    (comp.unix.admin)