Documentum 6.7 - Password Encryption
Hi,
we are devolping a web site in ASP.Net / C# for a Client that uses Documentum 6.7 as their Document Management Software.
The thing is that we already have the site but now we have to integrate the Login page (user types a username and password) with Documentum 'inline' passwords (also know as the 'database password')... wich are encrypted.
We already know Documentum has an encryption utility that encrypts user passwords wich is great but we don't know how to use it, call it or reference it from ASP.NET C#.
See this post for reference on Documentum encryption utility: https://community.emc.com/thread/114678https://community.emc.com/
We plan to encrrypt the user typed password and then compare it with the user_password column in oracle to check if the password is correct.
Can someone comment or help us on this matter?
we are devolping a web site in ASP.Net / C# for a Client that uses Documentum 6.7 as their Document Management Software.
The thing is that we already have the site but now we have to integrate the Login page (user types a username and password) with Documentum 'inline' passwords (also know as the 'database password')... wich are encrypted.
We already know Documentum has an encryption utility that encrypts user passwords wich is great but we don't know how to use it, call it or reference it from ASP.NET C#.
See this post for reference on Documentum encryption utility: https://community.emc.com/thread/114678https://community.emc.com/
We plan to encrrypt the user typed password and then compare it with the user_password column in oracle to check if the password is correct.
Can someone comment or help us on this matter?
gheist
DES (salted passwords) will soon make 40 years. Why would you try to reinvent the wheel?
ASKER
You mean, Documentum encrypts inline passwords using "DES" algorithm?
No, you describe unsalted passwords (i.e compare encryption of password with DB record)
Salted passwords would be - extract salt from DB(1 byte for DES, unlimited for rest), salt user input, encrypt (md5 at least, SHA-512 better) and compare with nonce in DB
I have no idea which one documentum uses. Clear sign of DES is unability to set passwords longer than 8 characters (i.e you may set 9 char password, then log in with 8-char beginning)
Salted passwords would be - extract salt from DB(1 byte for DES, unlimited for rest), salt user input, encrypt (md5 at least, SHA-512 better) and compare with nonce in DB
I have no idea which one documentum uses. Clear sign of DES is unability to set passwords longer than 8 characters (i.e you may set 9 char password, then log in with 8-char beginning)
ASKER
In the Oracle DB i have as 'user_password' a Varchar2(256 Byte) datatype which text (encrypted password) is:
FkCNzhctExYS9jnTSKLqhPOKxN
Can someone help with this information?
FkCNzhctExYS9jnTSKLqhPOKxN
Can someone help with this information?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.