This isn't related to DBI, so you shouldn't post follow ups to the list. In the future, you might want to post these types of questions on either the perl-unix-users or perl-win32-users lists hosted by Activestate <http://aspn.activestate.com/ASPN/Mail/>.
1) I don't suggest that you devise your own encryption algorithms. There are plenty of modules on CPAN implement encryption correctly. 2) For storing password type data in a database, I suggest that you store the results of running user input through the Digest::MD5 module. You will store the 'signature' of the password, not the password itself. When someone enters the password again, you then compare the stored signature against the signature generated against the new user input. 3) If you need to be able to encode/decode the output, you'll probably need to look at the Crytpt::* modules. Perl.com has some articles that'll prove information: Asymmetric Cryptography in Perl: <http://www.perl.com/pub/a/2001/09/26/crypto1.html> Symmetric Cryptography in Perl: <http://www.perl.com/pub/a/2001/07/10/crypto.html> On Thu, 11 Oct 2001, Vuillemot, Ward W wrote: > What is the best suggested method for encrypting/decrypting sensitive > material in a DB over the web? > For example, a password column in a users table for checking to see who has > access or not. I know that MySQL provides its own functionality from within > its environment, but I have not seen a method available through DBD::MySQL. > Is it available? Or should I just write my own encrypt/decrypt algorithms? > > Thanks, > Ward >
