![]() |
qt storing passwords in DB
so am trying to create a VNC client for sailfish, albeit badly, and saving multiple client entries in a DB, but how would I securely save a password. Would I hash it and then save it, but what about when I need to actually use it for logging in.
Or realistically is this not possible |
Re: qt storing passwords in DB
Hashing is good if you don't ever need to use the actual password, but only compare it to what the user has entered. In your case, you need the password, though.
You could store it encrypted (e.g. with the Blowfish algorithm) on device. Cargo Dock (https://github.com/pycage/cargodock) is an example of how Blowfish is used to encrypt passwords. |
Re: qt storing passwords in DB
Encrypting with a hardcoded secret is no better than ROT13.
So you need some kind of password-wallet, secured with a password given by the user. |
Re: qt storing passwords in DB
Quote:
|
All times are GMT. The time now is 16:33. |
vBulletin® Version 3.8.8