ActivePerl archive @ ASPN

Re: Module to encrypt/store/retrieve/decrypt passwords

$Bill Luebkert (dbecoll@...)

robert.w.sturdevant@... wrote:

> Hi List,
> 
>  
> 
> I have a perl ftp client that I am changing to sftp. I was storing
> passwords in an unencrypted text file since security was not an issue.
> Now I need a means of obfuscating the pwd.
> Surely there is a handy perl module (for Win32) that will do this
> easily. I don't need to generate or check passwords, just encode, store,
> retrieve, and decode. Does anyone know of a perl module for this? Are
> there docs or links avail that describe how this is normally done? Thanks...

For two-way encrypting, I would use Crypt::RSA.  If you only need to
one-way encrypt, you can use the crypt built-in.

_______________________________________________
ActivePerl mailing list
ActivePerl@...
To unsubscribe: http://listserv.ActiveState.com/mailman/mysubs

RE: Module to encrypt/store/retrieve/decrypt passwords

Wayne Simmons (wsimmons@...)

-----Original Message-----
>From: robert.w.sturdevant@...
[mailto:robert.w.sturdevant@... 
>Sent: Thursday, June 22, 2006 10:40 AM
>I don't need to generate or check passwords, just encode, store, retrieve,
and decode. Does >anyone know of a perl module for this? Are there docs or
links avail that describe how this is >normally done?

anyone with a basic understanding of cryptography (like me!) will tell you
that this is not the way it's supposed to work.  You should not be
"decrypting" stored values. If you can do it that means someone else can
too!  Were you to lose you "encrypted" passwords all they would need is your
key.  Typically you have a one-way function which, just as it sounds, will
encrypt something to the point where there is little likelihood of anyone
who has the encrypted value and getting the plaintext value back, including
you.  The way you should check passwords is then pass them through the 1 way
function and compare the encrypted value, to the stored encrypted value.

However, you say you're not comparing them, so perhaps this is out of your
control.  Typically to have the ability to encrypt and decrypt you need to
have a key. Since you won't need to pass your key around you won't need a
public key/private key system. 

Honestly if you just need light obfuscation to prevent a normal user from
reading plaintext passwords, you could just use the binary function XOR on
your data with a set value and then XOR them back.  I think in perl it would
be the caret (^) operator for XOR you'd have to verify that.  Just make sure
the value is as long as your password.

Otherwise I'm sure there are plenty of cryptography modules for you on ppm
or cpan if you look. However, these might be overboard for your uses.

-Wayne Simmons


--
CAM Automation Programmer
Unicircuit Inc.
Littleton, Colorado
303-738-5390

-- Warning Corporate Disclaimer to follow this line. --

This electronic mail transmission and any attachments contain information
belonging to the sender which may be confidential, privileged and exempt
from disclosure under applicable law.  This information is intended only for
the use of the individual or entity to whom this electronic mail
transmission is addressed.  If you are not the intended recipient or the
employee or agent responsible for delivering the message to the intended
recipient, you are hereby notified that any disclosure, copying,
distribution, or action taken or not taken in reliance on the contents of
the information contained in this transmission is strictly prohibited.  If
you have received this transmission in error, please immediately inform me
by "reply" e-mail and delete the message in its entirety.  Thank you.
Unicircuit, Inc.



 

_______________________________________________
ActivePerl mailing list
ActivePerl@...
To unsubscribe: http://listserv.ActiveState.com/mailman/mysubs

Re: Module to encrypt/store/retrieve/decrypt passwords

dz (dz@...)

----- Original Message -----
From: robert.w.sturdevant@...
Sent: 6/22/2006 12:40:07 PM
To: activeperl@...
Subject: Module to encrypt/store/retrieve/decrypt passwords

> Hi List,
> 
>  
> 
> I have a perl ftp client that I am changing to sftp. I was storing passwords
> in an unencrypted text file since security was not an issue. Now I need a
> means of obfuscating the pwd. 
> Surely there is a handy perl module (for Win32) that will do this easily. I
> don't need to generate or check passwords, just encode, store, retrieve, and
> decode. Does anyone know of a perl module for this? Are there docs or links
> avail that describe how this is normally done? Thanks...

Try Digest::MD5.  If all you need is obfuscation and not real encryption.  For real
encryption, you might want to check one of the Crypt::* modules (check CPAN, or search on
Google for a what's out there).

    -dZ.

_______________________________________________
ActivePerl mailing list
ActivePerl@...
To unsubscribe: http://listserv.ActiveState.com/mailman/mysubs

RE: Module to encrypt/store/retrieve/decrypt passwords

Jerry Davis (jerry.davis@...)

You don't need a module

Std perl comes with pack/unpack. Use the "u" mode or something.

Thanks, 
Jerry 
  
SCM Group 
480-610-7828 
  
=== 
Recursive: noun. 
     see Recursive. 

________________________________

From: activeperl-bounces@...
[mailto:activeperl-bounces@... On Behalf Of
robert.w.sturdevant@...
Sent: Thursday, June 22, 2006 9:40 AM
To: activeperl@...
Subject: Module to encrypt/store/retrieve/decrypt passwords

 

Hi List,

 

I have a perl ftp client that I am changing to sftp. I was storing
passwords in an unencrypted text file since security was not an issue.
Now I need a means of obfuscating the pwd. 
Surely there is a handy perl module (for Win32) that will do this
easily. I don't need to generate or check passwords, just encode, store,
retrieve, and decode. Does anyone know of a perl module for this? Are
there docs or links avail that describe how this is normally done?
Thanks...

 

Best regards,

Sturdy

 

 


**************************************************************************** 
This email may contain confidential material. 
If you were not an intended recipient, 
Please notify the sender and delete all copies. 
We may monitor email to and from our network. 
****************************************************************************

Re: problem with new() method of ithreads.

$Bill Luebkert (dbecoll@...)

ukhas jean wrote:

> Hello All,
>  
> Well the query i am about to ask may seem amatuerish, but i am asking it
> newayz...
> hope u gurus might not mind me asking such a thing ....
>  
> I had the following code :-  
> use threads;
> $thr = threads->new(\&sub1);

Try it with :
  sleep 1;
to give the thread a chance to print.

> sub sub1
> {
>  print "Inside the thread\n ";
> }
>  
> O/p comes:-
> A thread exited while 2 other threads were still running.
> I am using Perl 5.8.0 on Win XP.
> Plz note:- The content in the subroutine is not printed. I read it
> somewhere that we need to pass the reference of the subroutine to the
> new() method. But on doing so, the print statement in the subroutine is
> not getting executed.
>  
> So i removed the reference and made the statement as:-
> $thr = threads->new(&sub1);
>  
> O/p comes:-
> Inside the thread
> A thread exited while 2 other threads were still running.
_______________________________________________
ActivePerl mailing list
ActivePerl@...
To unsubscribe: http://listserv.ActiveState.com/mailman/mysubs

Module to encrypt/store/retrieve/decrypt passwords

Robert W Sturdevant (robert.w.sturdevant@...)

Hi List,

 

I have a perl ftp client that I am changing to sftp. I was storing passwords
in an unencrypted text file since security was not an issue. Now I need a
means of obfuscating the pwd. 
Surely there is a handy perl module (for Win32) that will do this easily. I
don't need to generate or check passwords, just encode, store, retrieve, and
decode. Does anyone know of a perl module for this? Are there docs or links
avail that describe how this is normally done? Thanks...

 

Best regards,

Sturdy

problem with new() method of ithreads.

Ukhas Jean (ukh_dtl@...)

Hello All,
   
  Well the query i am about to ask may seem amatuerish, but i am asking it newayz...
  hope u gurus might not mind me asking such a thing ....
   
  I had the following code :-  
  use threads;
  $thr = threads->new(\&sub1);
  sub sub1
{
 print "Inside the thread\n ";
}
   
  O/p comes:-
  A thread exited while 2 other threads were still running.

  I am using Perl 5.8.0 on Win XP.
  Plz note:- The content in the subroutine is not printed. I read it somewhere that we need
to pass the reference of the subroutine to the new() method. But on doing so, the print
statement in the subroutine is not getting executed.
   
  So i removed the reference and made the statement as:-
  $thr = threads->new(&sub1);
   
  O/p comes:-
  Inside the thread
  A thread exited while 2 other threads were still running.

  Here the print statement inside the subroutine sub1 gets executed. Which of these is the
correct syntax??
  But here I am not passing the reference of the subroutine ... Can any of u masters help
me understand this?? Sorry, if the query is a stupid one, but i really can't make sense of
it.
  Even if someone canguide/advise me to look at any documentation i shld refer to ... would
be great help ...
   
  Hoping u will kindly oblige ...
   
  Thanks and Regards,
  Ukhas Jean.  

		
---------------------------------
Do you Yahoo!?
 Next-gen email? Have it all with the  all-new Yahoo! Mail Beta.

Re: not defined Fcntl macro F_GETFL

$Bill Luebkert (dbecoll@...)

Stefan Drexleri wrote:

> I'm using perl script droute.pl from here:
> http://www.doxpara.com/ozymandns_src_0.1.tgz
> It's written for Linux.
> 
> Why shouldn't F_GETFL be used?

To avoid your problem obviously.  :)

The code looks really ragged to me.  select only works on sockets
in Win32, which would make it more difficult to do some things.
You can do non-blocking I/O to the console uwing Win32::Console
or Term::Readkey.  I'm guessing that on UNIX, this script is
spawned off with STDOUT/STDIN rerouted to possibly a remote socket.

You should be able to modify the code for the read and write to
handle non-blocking IO for Win32:

if ($^O eq 'MSWin32') {
} else {
}

and put the new code in the if part to handle non-blocking IO.
_______________________________________________
ActivePerl mailing list
ActivePerl@...
To unsubscribe: http://listserv.ActiveState.com/mailman/mysubs

Re: not defined Fcntl macro F_GETFL

Stefan Drexleri (niam.tni@...)

2006/6/22, $Bill Luebkert  Stefan Drexleri wrote:
>
> > Ok, i'll try out some other ways (different standalone cygwin ssh
> > client, native ssh/cygwin) and post my results.
>
> The real question is - why are you using F_GETFL ?  It would be better
> to just not use it if possible.
>

I'm using perl script droute.pl from here:
http://www.doxpara.com/ozymandns_src_0.1.tgz
It's written for Linux.

Why shouldn't F_GETFL be used?

bye
_______________________________________________
ActivePerl mailing list
ActivePerl@...
To unsubscribe: http://listserv.ActiveState.com/mailman/mysubs

Re: not defined Fcntl macro F_GETFL

$Bill Luebkert (dbecoll@...)

Stefan Drexleri wrote:

> Ok, i'll try out some other ways (different standalone cygwin ssh
> client, native ssh/cygwin) and post my results.

The real question is - why are you using F_GETFL ?  It would be better
to just not use it if possible.
_______________________________________________
ActivePerl mailing list
ActivePerl@...
To unsubscribe: http://listserv.ActiveState.com/mailman/mysubs