encrypt password

[Guest]

Hi All,
Does anyone know how to encrypt the password before store in the sql database?
In addition, decrypt the password from database before comparison.

The purpose to do it because to hide the human readable password although
the user open the sqlserver database.

Any ideas? Any better suggestion? any guidelines?
Thank you in advance.

Best regards,
Ocurnos

 

[Dhanushka Nuwan]

you can use System.Security.Cryptography classes to encript the password and
then store it in the database.
for more info: http://www.codeproject.com/aspnet/encrypt.asp

Cheers,

Dhanushka Nuwan
(e-mail address removed)

 

[Eliyahu Goldin]

Ocurnos,

The common approach is to hash passwords one way. You can't decrypt it.
Rather you hash the user entry with the same algorythm and compare the
hashed values. Look in

How To: Use Forms Authentication with SQL Server 2000
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnnetsec/html/SecNetHT03.asp

Eliyahu