我应该使用哪种技术来加密/解密MS Access数据库文件中的数据？ [英] Which technique should I use to encrypt/decrypt data in MS Access database file?

问题描述

我正在为我的C＃类工作最终项目。我的项目是密码管理程序。因为我第一次想到在AES中使用加密/解密文件，但是我的教授指出，MS Access数据库会是更好的选择。

我的问题是：如何使用我已经拥有的代码加密数据库中的数据？所以我指的是这篇文章（gutgames.com/post/AES-Encryption-in-C.aspx），这是完美的，我可以加密/解密数据。我应该使用这样的代码加密ms访问文件吗？请发布一些有用的链接如何加密我的数据。

解决方案

加密访问文件本身将限制您的并发访问和人们能够访问数据库的不同位。您的最终目标应该是加密/数据库内的数据，并确保人们只能访问应允许访问的内容。安全管理密码的常见方法之一是对密码进行散列/加密，并将其存储（您链接到的代码将会很好）。在登录到数据库存储密码的任何系统后，您将对提供的密码进行散列/加密，并将其与存储的密码进行比较。如果用户需要新密码，请生成一个新密码，存储散列/加密的副本，并向用户提供新密码。

如果您想要恢复密码（即如果您想要一个忘记密码功能给用户提供密码，而不是给他们一个新的密码）加密，这样可以解密才能返回给用户。只要发出新的密码就行了，哈哈吧。

I am working on final project for my C# class. My project is a password management program. As I first thought to use just encrypting/decrypting file in AES but my professor pointed out that MS Access database would be much better choice.

My question is: how would I encrypt data in database using code I already have? So day I am referring to this article ( gutgames.com/post/AES-Encryption-in-C.aspx ) which works perfect and I can encrypt/decrypt data. Should I use thus code to encrypt ms access file? please post some useful links how would I encrypt my data.

解决方案

Encrypting the Access file itself would limit your options regarding concurrent access and people being able to access different bits of the database. Your end goal should be to encrypt data /within/ the database, and ensure people can only access what they should be allowed to access. One of the common ways of securely managing passwords is to hash/encrypt the password and store that (for which the code you linked to would be fine). Upon login to whatever system the database is storing the passwords for, you would hash/encrypt the provided password and compare it to the stored one. If the user needs a new password, generate a new one, store the hashed/encrypted copy, and give the user their new password.

If you want to be able to recover the password (i.e. if you want a Forgot My Password function to give the user their password rather than give them a new one) encrypt it, so that's it's decryptable to provide back to the user. If you're okay with just issuing new passwords, hash it.

这篇关于我应该使用哪种技术来加密/解密MS Access数据库文件中的数据？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！