Hi everyone,
After months of working fine, my tripleDES encryption/decryption is acting weird. After way too many users having difficulty with their passwords I was asked to "make the problem go away". What I came up with is having our web login store the users password
in an encrypted form in a database table keyed off of their userID. Their userID is taken from the workstation user logged on so they can only log in from their own machine. When they hit the login page it checks the table and retrieves their stored password
and decrypts it. Then it uses the decrypted string to login. Each month when their password expires it traps the error message from the database and gives them a change password screen. When they submit the new password, the password is checked for validity
and if it passes, it is encrypted and used to update the database table storing their password.
A few days ago it began returning an ...
Go to the complete details ...