Thanks Matt! I just love it when this happens. I've sporadically used encrypt()/decrypt() for years (although usually in custom tags and the like) and never knew they took any arguments!! ;-)
spell it with me...D....O....H...!!! Good to know I still have some things to learn about CF...hehe Cheers On Sat, 2010-02-13 at 11:17 -0800, Matthew Woodward wrote: > On Sat, Feb 13, 2010 at 10:15 AM, Bryan Stevenson > <[email protected]> wrote: > The code is below (apoogies for the length), but the questions > is simply > whether the encrypt() and decrypt() functions are the same in > Adobe CF > and OpenBD? > > > Probably splitting hairs but yes, it functions the same. The result of > the encryption operation, however, depends entirely on the algorithm > you use. > > If you don't specify an algorithm the default is CFMX_COMPAT for Adobe > CF, and this type of encryption is not supported by OpenBD. The > default in OpenBD is BD_DEFAULT, which will yield different results > than CFMX_COMPAT. Note that CFMX_COMPAT is not very secure at all, so > if you're concerned about encrypting for security you'll want to use > something else anyway. > > OpenBD supports AES, Blowfish, DES, and DESEDE ("triple DES") > natively, but you can add additional algorithms by leveraging > BouncyCastle (http://www.bouncycastle.org/) or any third-party Java > encryption library. More info on the wiki: > http://bit.ly/agmohy > > I'll update that with a bit more info to more clearly address this > question. > > So the key to getting the encrypt() function to yield the same result > between OpenBD and Adobe CF is to *not* use the default algorithm on > either engine, but to use something that's common between them, which > AES, Blowfish, DES, and DESEDE all are. > > Note also that the Enterprise version of Adobe CF supports encryption > algorithms that are not available on Adobe CF Standard, but there is a > lot of overlap if you add BouncyCastle to OpenBD. You can see what > BouncyCastle supports here: > http://www.bouncycastle.org/specifications.html > > Hope that helps. > > -- > Matthew Woodward > [email protected] > http://blog.mattwoodward.com > identi.ca/Twitter: @mpwoodward > > Please do not send me proprietary file formats such as Word, > PowerPoint, etc. as attachments. > http://www.gnu.org/philosophy/no-word-attachments.html > > > -- > Open BlueDragon Public Mailing List > http://www.openbluedragon.org/ http://twitter.com/OpenBlueDragon > mailing list - http://groups.google.com/group/openbd?hl=en > > !! save a network - please trim replies before posting !! Bryan Stevenson B.Comm. VP & Director of E-Commerce Development Electric Edge Systems Group Inc. phone: 250.480.0642 fax: 250.480.1264 cell: 250.920.8830 e-mail: [email protected] web: www.electricedgesystems.com Notice: This message, including any attachments, is confidential and may contain information that is privileged or exempt from disclosure. It is intended only for the person to whom it is addressed unless expressly authorized otherwise by the sender. If you are not an authorized recipient, please notify the sender immediately and permanently destroy all copies of this message and attachments. Please consider the environment before printing this e-mail -- Open BlueDragon Public Mailing List http://www.openbluedragon.org/ http://twitter.com/OpenBlueDragon mailing list - http://groups.google.com/group/openbd?hl=en !! save a network - please trim replies before posting !!
