Encryption of input field

classic Classic list List threaded Threaded
6 messages Options
SD
Reply | Threaded
Open this post in threaded view
|

Encryption of input field

SD
This post was updated on .
Hi,

I have an input field
<xf:input ref="instance('user-model-record')/password">
      <xf:label>Password</xf:label>
</xf:input>


I'm storing this in the database as clear text, does orbeon support encryption algo like RSA or DES (anyother) so that I can store encrypted text instead of clear.

Thanks
--SD
Reply | Threaded
Open this post in threaded view
|

Re: Encryption of input field

Erik Bruchez
Administrator
SD,

Yes, Orbeon supports the XForms 1.1 digest() function:


-Erik

On Wed, Mar 16, 2011 at 11:27 AM, SD <[hidden email]> wrote:
Hi,

I have an input field

     Password


I'm storing this in the database as clear text, does orbeon support
encryption algo like RSA or DES (anyother) so that I can store encrypted
text instead of clear.

Thanks
--SD


--
View this message in context: http://orbeon-forms-ops-users.24843.n4.nabble.com/Encryption-of-input-field-tp3382583p3382583.html
Sent from the Orbeon Forms (ops-users) mailing list archive at Nabble.com.


--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws




--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws
SD
Reply | Threaded
Open this post in threaded view
|

Re: Re: Encryption of input field

SD
Erik,

I do not want a digest, i want an encryption function so that I can store the password as encrypted text and decrypt it wherever required.

On Wed, Mar 16, 2011 at 10:46 PM, Erik Bruchez <[hidden email]> wrote:
SD,

Yes, Orbeon supports the XForms 1.1 digest() function:


-Erik

On Wed, Mar 16, 2011 at 11:27 AM, SD <[hidden email]> wrote:
Hi,

I have an input field

     Password


I'm storing this in the database as clear text, does orbeon support
encryption algo like RSA or DES (anyother) so that I can store encrypted
text instead of clear.

Thanks
--SD


--
View this message in context: http://orbeon-forms-ops-users.24843.n4.nabble.com/Encryption-of-input-field-tp3382583p3382583.html
Sent from the Orbeon Forms (ops-users) mailing list archive at Nabble.com.


--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws




--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws




--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws
Reply | Threaded
Open this post in threaded view
|

Re: Re: Re: Encryption of input field

Erik Bruchez
Administrator
Ah, in that case, we don't have such a function readily available.

Note that it is typical to use a hashing algorithm for passwords, rather than encrypt/decrypt.

What encryption algorithm are you looking for specifically?

-Erik

On Thu, Mar 17, 2011 at 8:37 AM, Snehadeep Sethia <[hidden email]> wrote:
Erik,

I do not want a digest, i want an encryption function so that I can store the password as encrypted text and decrypt it wherever required.


On Wed, Mar 16, 2011 at 10:46 PM, Erik Bruchez <[hidden email]> wrote:
SD,

Yes, Orbeon supports the XForms 1.1 digest() function:


-Erik

On Wed, Mar 16, 2011 at 11:27 AM, SD <[hidden email]> wrote:
Hi,

I have an input field

     Password


I'm storing this in the database as clear text, does orbeon support
encryption algo like RSA or DES (anyother) so that I can store encrypted
text instead of clear.

Thanks
--SD


--
View this message in context: http://orbeon-forms-ops-users.24843.n4.nabble.com/Encryption-of-input-field-tp3382583p3382583.html
Sent from the Orbeon Forms (ops-users) mailing list archive at Nabble.com.


--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws




--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws




--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws




--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws
SD
Reply | Threaded
Open this post in threaded view
|

Re: Re: Re: Re: Encryption of input field

SD
Erik,

The functionality of the usecase is like this

1. Grab a userid and password from the user and store it in an xml file
2. A jar would then read this userid and password to connect to a webservice

So all I wanted was to store the password entered by the user in an encrypted format and decrypt it back in the jar. 
I cannot use hash function because the webservice that I'm calling doesn't accept hash but takes the actual password

RSA is what I was looking into

--SD

On Thu, Mar 17, 2011 at 8:45 PM, Erik Bruchez <[hidden email]> wrote:
Ah, in that case, we don't have such a function readily available.

Note that it is typical to use a hashing algorithm for passwords, rather than encrypt/decrypt.

What encryption algorithm are you looking for specifically?

-Erik


On Thu, Mar 17, 2011 at 8:37 AM, Snehadeep Sethia <[hidden email]> wrote:
Erik,

I do not want a digest, i want an encryption function so that I can store the password as encrypted text and decrypt it wherever required.


On Wed, Mar 16, 2011 at 10:46 PM, Erik Bruchez <[hidden email]> wrote:
SD,

Yes, Orbeon supports the XForms 1.1 digest() function:


-Erik

On Wed, Mar 16, 2011 at 11:27 AM, SD <[hidden email]> wrote:
Hi,

I have an input field

     Password


I'm storing this in the database as clear text, does orbeon support
encryption algo like RSA or DES (anyother) so that I can store encrypted
text instead of clear.

Thanks
--SD


--
View this message in context: http://orbeon-forms-ops-users.24843.n4.nabble.com/Encryption-of-input-field-tp3382583p3382583.html
Sent from the Orbeon Forms (ops-users) mailing list archive at Nabble.com.


--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws




--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws




--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws




--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws




--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws
Reply | Threaded
Open this post in threaded view
|

Re: Re: Re: Re: Re: Encryption of input field

Erik Bruchez
Administrator
I understand.

It's pretty easy to call static Java methods from XPath. You could provide your own Java classes/JAR providing encryption/decryption.

-Erik

On Fri, Mar 18, 2011 at 9:00 AM, Snehadeep Sethia <[hidden email]> wrote:
Erik,

The functionality of the usecase is like this

1. Grab a userid and password from the user and store it in an xml file
2. A jar would then read this userid and password to connect to a webservice

So all I wanted was to store the password entered by the user in an encrypted format and decrypt it back in the jar. 
I cannot use hash function because the webservice that I'm calling doesn't accept hash but takes the actual password

RSA is what I was looking into

--SD


On Thu, Mar 17, 2011 at 8:45 PM, Erik Bruchez <[hidden email]> wrote:
Ah, in that case, we don't have such a function readily available.

Note that it is typical to use a hashing algorithm for passwords, rather than encrypt/decrypt.

What encryption algorithm are you looking for specifically?

-Erik


On Thu, Mar 17, 2011 at 8:37 AM, Snehadeep Sethia <[hidden email]> wrote:
Erik,

I do not want a digest, i want an encryption function so that I can store the password as encrypted text and decrypt it wherever required.


On Wed, Mar 16, 2011 at 10:46 PM, Erik Bruchez <[hidden email]> wrote:
SD,

Yes, Orbeon supports the XForms 1.1 digest() function:


-Erik

On Wed, Mar 16, 2011 at 11:27 AM, SD <[hidden email]> wrote:
Hi,

I have an input field

     Password


I'm storing this in the database as clear text, does orbeon support
encryption algo like RSA or DES (anyother) so that I can store encrypted
text instead of clear.

Thanks
--SD


--
View this message in context: http://orbeon-forms-ops-users.24843.n4.nabble.com/Encryption-of-input-field-tp3382583p3382583.html
Sent from the Orbeon Forms (ops-users) mailing list archive at Nabble.com.


--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws




--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws




--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws




--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws




--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws




--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws