Re: Storing passwords

From: Bruce Momjian <pgman(at)candle(dot)pha(dot)pa(dot)us>
To: Christoph Dalitz <christoph(dot)dalitz(at)hs-niederrhein(dot)de>
Cc: Troy(dot)Campano(at)libertymutual(dot)com, pgsql-general(at)postgresql(dot)org
Subject: Re: Storing passwords
Date: 2002-12-27 18:51:04
Message-ID: 200212271851.gBRIp4020071@candle.pha.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

Christoph Dalitz wrote:
> Date: Fri, 27 Dec 2002 10:01:30 -0500
> From: "Campano, Troy" <Troy(dot)Campano(at)LibertyMutual(dot)com>
> >
> > Is there a PostgreSQL function that allows you to store passwords, but it encrypts them?
> > If not, are there any recommendations for storing passwords?
> >
> The easiest solution would be a stored procedure written in C that simply
> calls the crypt() function (for details: "man crypt"). In that case you will
> also need to store the "salt" with the encrypted password.
>
> Even if you have not yet written any stored procedure, it should be done
> in less than two hours. See the documentation on "server side programming" for details.

Also, see /contrib/pgcrypto for encryption routines.

--
Bruce Momjian | http://candle.pha.pa.us
pgman(at)candle(dot)pha(dot)pa(dot)us | (610) 359-1001
+ If your life is a hard drive, | 13 Roberts Road
+ Christ can be your backup. | Newtown Square, Pennsylvania 19073

In response to

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Bruce Momjian 2002-12-27 19:21:02 Re: Storing passwords
Previous Message Tom Lane 2002-12-27 18:39:58 Re: Trouble with UNIX TimeStamps