As for single username/pass encryption (not the whole DB), and assuming you want two-way encrypt (that you want to decrypt), I have used both,��Rijndael and��Blowfish, both in combination with��SpsSplitPasswordStore.

Cheers,

On Tue, Feb 21, 2017 at 8:20 AM, Pierce Ng <pierce@samadhiweb.com> wrote:
On Mon, Feb 20, 2017 at 05:34:41AM -0800, sergio ruiz wrote:
> I have been tasked with throwing together a small web app that will hold
> the passwords to different projects for my company.

Here is a collection for reference. If one of these is suitable you can skip the
implementation and just deploy.

�� http://opensourcepasswordmanager.com/

> - encrypt the entire database, so that if the machine was compromised
> physically, the data would be useless.

The NativeBoost version of my SQLite library supports SQLcipher which adds
transparent full database encryption to SQLite. It is not in the UFFI version
yet though.

�� http://sqlcipher.net

> - encrypt the username and password fields to facilitate the above, also.

If you are already familiar with using crypto API like OpenSSL or NaCl then
Pharo's FFI is easy to get this done too.

Pierce





--
Mariano
http://marianopeck.wordpress.com