08 Jan, 03:42PM in sunny Singapore!

programming encryption

Subscribe to programming encryption 15 posts

Please Login or Signup to reply.
  • StarPuppy's Avatar
    30,518 posts since Jan '04
    • my Internet/Network Security FYP is about creating "a login website"(hotmail) of which if a hacker manage to sniff the password..it would be jumbled up

      now the thing is i am given a range of programming platform to learn/use as my teacher allow us to use anything we want

      (e.g: VB, ASP, Java, C++)

      so what would be easy to understand for the programming noob like me?

  • Moderator
    ndmmxiaomayi's Avatar
    53,347 posts since Aug '05
  • StarPuppy's Avatar
    30,518 posts since Jan '04
  • Moderator
    ndmmxiaomayi's Avatar
    53,347 posts since Aug '05
    • As far as I know, I don't know how to use VB, C++, C to create web applications.

      ASP and Java is possible...

  • DarthBart's Avatar
    221 posts since Nov '06
    • Try using a hashing algo to digest the password
      I've used SHA1 in JSP back in my poly days to do that

  • thoreldan's Avatar
    3,952 posts since Jun '03
    • TS:

      are you told to invent a simple algorithm yourself?
      or
      make use of available encryption algorithm?

  • StarPuppy's Avatar
    30,518 posts since Jan '04
    • Originally posted by thoreldan:
      TS:

      are you told to invent a simple algorithm yourself?
      or
      make use of available encryption algorithm?

      both are allowed but i would like to try my hand of making one myself

      Very Happy Very Happy Very Happy

  • hisoka's Avatar
    33,555 posts since Mar '05
    • how will the hacker sniff out the password? hack into the company database? keyloggers on the user computer? tracking of the packets sent/received?

  • Moderator
    ndmmxiaomayi's Avatar
    53,347 posts since Aug '05
    • I wouldn't say to invent, particularly if one has totally what security is about, what encryption is about, what's PKI, what's hashing, what's this and what's that.

      Make use of existing algorithms.

      If you really want to create a whole new algorithm, go Counterpane and read up.

  • StarPuppy's Avatar
    30,518 posts since Jan '04
    • Originally posted by hisoka:
      how will the hacker sniff out the password? hack into the company database? keyloggers on the user computer? tracking of the packets sent/received?

      it is assumed that the data is being sniffed

      so a encyrpted algorithim is needed

  • Moderator
    ndmmxiaomayi's Avatar
    53,347 posts since Aug '05
    • Originally posted by hisoka:
      how will the hacker sniff out the password? hack into the company database? keyloggers on the user computer? tracking of the packets sent/received?

      Tracking of packets...

  • Moderator
    ndmmxiaomayi's Avatar
    53,347 posts since Aug '05
    • Originally posted by StarPuppy:
      it is assumed that the data is being sniffed

      so a encyrpted algorithim is needed

      Sure?

  • Moderator
    ndmmxiaomayi's Avatar
    53,347 posts since Aug '05
  • l0st-s0ul's Avatar
    420 posts since Jun '04
    • There are various layers of encryption u could apply.

      At network layer - IP Security
      At transport layer - SSL
      At application layer - S/MIME

      Since ur main concern is confidentiality, all of the protocols above provides a form of encryption. U could also add authentication as an additional form of security.

      As for the platform used, I would say to use what u are most comfortable with.

  • o0Nite0o's Avatar
    157 posts since Oct '06
Please Login or Signup to reply.