[Gambas-user] User Digest, Vol 22, Issue 18

[james]

"user-request at lists.gambas-basic.org" <user-request at lists.gambas-basic.org> – July 7, 2019 6:14 PM
> Send User mailing list submissions to
> user at lists.gambas-basic.org
> 
> To subscribe or unsubscribe via the World Wide Web, visit
> lists.gambas-basic.org/listinfo/user
> or, via email, send a message with subject or body 'help' to
> user-request at lists.gambas-basic.org
> 
> You can reach the person managing the list at
> user-owner at lists.gambas-basic.org
> 
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of User digest..."
> 
> 
> Today's Topics:
> 
> 1. Re: Can I encrypt a string (Mayost Sharon)
> 2. Re: Can I encrypt a string (Tobias Boege)
> 
> 
> ----------------------------------------------------------------------
> 
> Message: 1
> Date: Sun, 7 Jul 2019 11:40:10 +0300
> From: "Mayost Sharon" <sharon at 455.co.il>
> To: Gambas Mailing List <user at lists.gambas-basic.org>
> Subject: Re: [Gambas-user] Can I encrypt a string
> Message-ID: <20190707083906.M56479 at 455.co.il>
> Content-Type: text/plain; charset=utf-8
> 
> Sorry
> This link:
> gambaswiki.org/wiki/comp/gb.openssl/cipher
> 
> ---------- Original Message -----------
> From: Tobias Boege <taboege at gmail.com>
> To: Gambas Mailing List <user at lists.gambas-basic.org>
> Sent: Sun, 7 Jul 2019 10:35:31 +0200
> Subject: Re: [Gambas-user] Can I encrypt a string
> 
> > On Sun, 07 Jul 2019, Mayost Sharon wrote:
> > > Thank you very much
> > > 
> > > In Fedora 30 the version is: 3.12
> > > I have to wait for the version 3.14
> > > 
> > > 
> > > If I use this example:
> > > http://gambas.sourceforge.net/en/main.html#
> > > 
> > > Do I lose anything in security?
> > >
> > 
> > You pasted a link to the main iframe of the Gambas homepage,
> > I don't see what you saw.
> > 
> > Regards,
> > Tobi
> > 
> > -- 
> > "There's an old saying: Don't change anything... ever!" -- Mr. Monk
> > 
> > ----[ Gambas mailing-list is hosted by www.hostsharing.net ]----
> ------- End of Original Message -------
> 
> 
> 
> ------------------------------
> 
> Message: 2
> Date: Sun, 7 Jul 2019 11:08:03 +0200
> From: Tobias Boege <taboege at gmail.com>
> To: Gambas Mailing List <user at lists.gambas-basic.org>
> Subject: Re: [Gambas-user] Can I encrypt a string
> Message-ID: <20190707090803.GE1426 at highrise.localdomain>
> Content-Type: text/plain; charset=us-ascii
> 
> On Sun, 07 Jul 2019, Mayost Sharon wrote:
> > ---------- Original Message -----------
> > From: Tobias Boege <taboege at gmail.com>
> > To: Gambas Mailing List <user at lists.gambas-basic.org>
> > Sent: Sun, 7 Jul 2019 10:35:31 +0200
> > Subject: Re: [Gambas-user] Can I encrypt a string
> > 
> > > On Sun, 07 Jul 2019, Mayost Sharon wrote:
> > > > Thank you very much
> > > > 
> > > > In Fedora 30 the version is: 3.12
> > > > I have to wait for the version 3.14
> > > > 
> > > > 
> > > > If I use this example:
> > > > http://gambas.sourceforge.net/en/main.html#
> > > > 
> > > > Do I lose anything in security?
> > > >
> > > 
> > > You pasted a link to the main iframe of the Gambas homepage,
> > > I don't see what you saw.
> > > 
> >
> > Sorry
> > This link:
> > gambaswiki.org/wiki/comp/gb.openssl/cipher
> > 
> 
> The Encrypt method takes a key and an IV directly, whereas EncryptSalted
> takes a *password* and a salt, then derives a cryptographic key from them
> and then this key is used to encrypt the data. The key is derived using
> PKCS#5 v1.5, an older KDF which gb.openssl uses for compatibility with
> the `openssl` commandline utility which still has that as the default.
> 
> I'm no security expert, so now that you know the difference, please make
> up your own mind about it [1]. If your interface uses passwords (like your
> code suggests), you likely want EncryptSalted, though.
> 
> Regards,
> Tobi
> 
> [1] en.wikipedia.org/wiki/Key_derivation_function
> 
> -- 
> "There's an old saying: Don't change anything... ever!" -- Mr. Monk
> 
> 
> ------------------------------
> 
> Subject: Digest Footer
> 
> ----[ Gambas mailing-list is hosted by www.hostsharing.net ]----
> 
> 
> ------------------------------
> 
> End of User Digest, Vol 22, Issue 18
> ************************************