LinuxQuestions.org
Go Job Hunting at the LQ Job Marketplace
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
Search this Thread
Old 08-11-2005, 12:39 AM   #1
rblampain
Member
 
Registered: Aug 2004
Location: Western Australia
Distribution: Debian 7
Posts: 833

Rep: Reputation: 35
encryption in CGI routine


I need to encrypt a small file received from an HTML form through a CGI routine. This file needs to be converted back to plain text later (HASH not suitable).

The main problem I face is to have the pass phrase or password automatically provided when requested through stdin. The CGI routines are written in assembly, I only have a basic knowledge of C and PHP and no knowledge of Perl.

Can anyone suggest how to proceed? Point to suitable links? Give a hint?

Thank you.
 
Old 08-11-2005, 06:41 AM   #2
rblampain
Member
 
Registered: Aug 2004
Location: Western Australia
Distribution: Debian 7
Posts: 833

Original Poster
Rep: Reputation: 35
I've found it's possible with PHP. I'll update this post with the results after trying the PHP solution.
 
Old 08-12-2005, 10:37 AM   #3
sundialsvcs
Guru
 
Registered: Feb 2004
Location: SE Tennessee, USA
Distribution: Gentoo, LFS
Posts: 5,329

Rep: Reputation: 1099Reputation: 1099Reputation: 1099Reputation: 1099Reputation: 1099Reputation: 1099Reputation: 1099Reputation: 1099
You would do well to study the features of a full-featured encryption package such as openssl, which should be readily available now on your system and for which interfaces exist in both php and perl.

Key-management, authentication, spoofing-prevention, forgery-prevention and so on are all important issues, and all of them have been ably handled. You won't do any better "on your own."
 
Old 08-12-2005, 10:55 PM   #4
rblampain
Member
 
Registered: Aug 2004
Location: Western Australia
Distribution: Debian 7
Posts: 833

Original Poster
Rep: Reputation: 35
Thanks to sundialsvcs.
I am probably expecting it to be easier than possible. Seen from your perspective, I should first determine what I need to learn for my needs: OpenSSL or Gnupg or whatever. I'm doing this as a volunteer for a Not-For-Profit and will only learn what is absolutely necessary to get it going, then the pros can take over when finance permits.
Perhaps you can advise what package to learn and use when you consider that the encryption/decryption mentioned above is all I need.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Interrupt routine... Elric of Grans Programming 2 07-05-2005 07:11 PM
About startup routine eshwar_ind Programming 18 05-23-2004 02:01 AM
Please confirm backup routine LLS Linux - General 4 09-30-2003 11:30 AM
Mandrake 9.0 Wireless Works without encryption.. does not with encryption topcat Linux - Wireless Networking 3 05-04-2003 08:47 PM
http://www.burstnet.com/cgi-bin/ads/ad7954a.cgi/3980/RETURN-CODE rverlander LQ Suggestions & Feedback 1 06-07-2002 07:35 AM


All times are GMT -5. The time now is 02:00 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration