As for single username/pass encryption (not the whole DB), and assuming you want two-way encrypt (that you want to decrypt), I have used both, Rijndael and Blowfish, both in combination with SpsSplitPasswordStore. Cheers, On Tue, Feb 21, 2017 at 8:20 AM, Pierce Ng <pierce@samadhiweb.com> wrote:
On Mon, Feb 20, 2017 at 05:34:41AM -0800, sergio ruiz wrote:
I have been tasked with throwing together a small web app that will hold the passwords to different projects for my company.
Here is a collection for reference. If one of these is suitable you can skip the implementation and just deploy.
http://opensourcepasswordmanager.com/
- encrypt the entire database, so that if the machine was compromised physically, the data would be useless.
The NativeBoost version of my SQLite library supports SQLcipher which adds transparent full database encryption to SQLite. It is not in the UFFI version yet though.
- encrypt the username and password fields to facilitate the above, also.
If you are already familiar with using crypto API like OpenSSL or NaCl then Pharo's FFI is easy to get this done too.
Pierce
-- Mariano http://marianopeck.wordpress.com