Hey Joe -
How have things been since Nomura - if you remember me from that project and
you are in fact the same Joe De'Souza.
To move along, encryption algorithms vary. If I am not mistaken Remedy ARS
uses DES block-cipher encryption in the ENCRYPT function. DES in and of
itself is symmetric from an algorithm standpoint. It uses one 64-bit key to
encrypt a block of plaintext that is 64-bits into ciphered text. It has one
parity bit for each byte of the provided key which generates a key strength
which is only 56-bits.
Per BMC Documentation:
"The output is limited to the size of the field used for output, including the
base-64 encoding.Therefore, you are limited to encrypting a string that is 3/4
the size of the output field."
Using the passphrase method as a way to generate the encrypted text is achieved
using, most probably, a key derivation and salt combination.
In order to decrypt ciphered text you would need to "code" an external DES
ciphering utility in your language of choice that would encrypt the plain text
based on the key provided or decrypt the ciphered text using the key provided.
As long as you have the key you can go back and forth with the
encryption/decryption.
By the way, why do you need to know the length of the output string? I am
assuming when you say length you mean character count or something similar.
Mike
Date: Fri, 20 Apr 2012 13:48:37 -0400
From: jdso...@shyle.net
Subject: Working with ENCRYPT() function...
To: arslist@ARSLIST.ORG
**
Is there a known algorithm to calculate the length of the output results of
ENCRYPT based on the length of the input string and the encryption key
parameters?
I
vaguely remember that the length is 120. Or is that only the length of the
encrypted value in Field 123?
Also how
would one decrypt the contents of Field 123 if that is used for storing a
password that is used for authenticating into an external app or wsdl?
Joe
_attend WWRUG12 www.wwrug.com ARSlist: "Where the Answers Are"_
_______________________________________________________________________________
UNSUBSCRIBE or access ARSlist Archives at www.arslist.org
attend wwrug12 www.wwrug12.com ARSList: "Where the Answers Are"
