如何在sql查询中解密密码和密码salt，在mvc4中存储simplecrypto.PBKDF2 [英] how to decrypt password and password salt in sql query stored simplecrypto.PBKDF2 in mvc4

问题描述

大家好，

我使用SimpleCrypto.PBKDF2（）来加密MVC4项目中的密码。在Sql表中，密码nvarchar（200），Passwordsalt nvarchar（200）做到了。登录页面可以使用。我想知道如何在Sql Designer中解密这些密码和passwordsalt。像EncryptByPassphrase和DecryptByPassphrase一样，我们可以在sql查询中选择密码字段。



为此，使用C＃代码中的SimpleCrypto.PBKDF2（）存储然后如何在Sql中解密查询设计者的密码。让我解释。谢谢大家。

Hi All,
I used SimpleCrypto.PBKDF2() to encrypt password in MVC4 project . In Sql Table, Password nvarchar(200),Passwordsalt nvarchar(200) did it. Login Page is OK to use. I wanna know how to decrypt these password and passwordsalt in Sql Designer. Like EncryptByPassphrase and DecryptByPassphrase, we can select password field in sql query.

For this, stored using SimpleCrypto.PBKDF2() in C# code and then how to decrypt in Sql Query designer for password. Let me explain. Thanks to all.

推荐答案

不好主意。像你尝试的那样加密密码是完全不安全的。实际上，密码永远不会被任何人解密，这绝对不需要进行身份验证。因此，在任何情况下，您的加密方法都应该让解密对任何人都不可行。并且密码永远不应该存储在任何地方，除了创建密码的人之外，任何人都不应该知道密码。这意味着并不真正需要加密。通常，使用加密哈希函数。



请查看我过去的答案：

我已经加密了我的密码但是当我登录时给我一个错误。如何解密 [ ^ ] ，

存储密码值具有安全方式的int sql server [ ^ ]，

解密加密密码 [ ^ ]。

-SA

Bad idea. Encrypting passwords, like you try to do, is utterly unsafe. Actually, passwords should never ever be decrypted by anyone at all, this is absolutely not needed for authentication. Therefore, your cryptography approach should keep "decryption" infeasible for anyone in any situations. And a password should never be stored anywhere at all, and never should be known to anyone except the person who created it. And it mean that encryption is not really needed. Normally, cryptographic hash function is used instead.

Please see my past answers:
i already encrypt my password but when i log in it gives me an error. how can decrypte it[^],
storing password value int sql server with secure way[^],
Decryption of Encrypted Password[^].

—SA

这篇关于如何在sql查询中解密密码和密码salt，在mvc4中存储simplecrypto.PBKDF2的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！