Finally got around to perusing the November issue of Linux Gazette this morning.   Was pleasantly surprised to find an article entitled "Encrypting Data In Web Forms", about using CPAN module Crypt::Blowfish to um, encrypt data in web forms.

I've yet to delve into that aspect of Our Favorite Programming Language, so can't comment on technical merits.   Thought y'all might find it of interest.
    cheers,
    Don
    striving for Perl Adept

Replies are listed 'Best First'.
(redmist) RE: C::B at LG
by redmist (Deacon) on Nov 05, 2000 at 23:50 UTC
      Since no one else has chimed in on this with anything useful, I'll take up the gauntlet.

      crypt() isn't a full system for encrypting and decrypting data. It is a one way 'hash' used for encrypting passwords. The old system for unixish password protection used crypt().

      The salt is a two character string that is "blended" into to given password when hashing to help confuse the reversing of hashes back to passwords. The stored password is of the form: SSHHHHHHHHHHH. When you are given a password and you want to check it against the stored hash, you simply do:

      sub passtest { $passtotest=shift; $crypted=shift; return ( crypt($passtotest,$crypted) eq $crypted ); }

      The crypt function will just take the first two characters off of it's second argument and thus use the same salt as the originally crypted password. See perldoc -f crypt for more on this.

      Just please don't think you can get data back out of crypt() =)

      --
      $you = new YOU;
      honk() if $you->love(perl)

                        Pronunciation: &-'solt
                        Function: noun
                        Etymology: Middle English assaut, from Old French, from
                        (assumed) Vulgar Latin assaltus, from assalire
                        Date: 14th century
                        1 a : a violent physical or verbal attack b : a military attack
                        usually involving direct combat with enemy forces c : a
                        concerted effort (as to reach a goal or defeat an adversary)
                        2 a : a threat or attempt to inflict offensive physical contact
                        or bodily harm on a person (as by lifting a fist in a
                        threatening manner) that puts the person in immediate
                        danger of or in apprehension of such harm or contact --