Re: Storing encrypted passwords on AS400

[Brett Slocum <brett.slocum@xxxxxxxxx>]

On Wed, 09 Feb 2005 20:05:26 +0100, Franco Biaggi <fbiaggi@xxxxxxxxxx> wrote:
> this is possible, due to data conversions...
> try to store the passwords in plain text like:
> 
> String encrypted_pwd = SecurityHandler.encryptToString( enteredPassword );

The only problem with this method is that the Strings generated are 40
characters long (I just ran a test case), and the password field in
the database is only 25 characters long. I'm trying to change the
method of encryption without changing the database. We are installed
in hundreds of locations and updating the AS400 library is only done
when absolutely necessary.

Is there a way to pack these bytes closer and still use Strings? I
realize that packing them as single characters is what is giving me
the headache in the first place.

If I have to, I'll change the field length, but this would be a last
resort, and would delay the change for at least 6 months.

-- 
Brett Slocum
<slocum@xxxxxxxxxxxxxx>