Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Aptify e-Business 5.5.2 introduces a one-way cryptographic hash function to improve the security of password changes for the application. The one-way cryptographic hash function turns the password into a fixed string of digits, which makes it nearly impossible to derive the original password text from the string. The AptifySecurityKey object was updated to support the one-way cryptographic hash function, while maintaining support for the existing two-way cryptographic encryption methodology. There were also changes made to the EbusinessLogin object and the code behind for the user controls related to the login process.

Info

The Aptify one-way cryptographic hash function uses the SHA 512 Secure Hash Standard. For more information on the SHA 512 Secure Hash Standard, see FIPS PUB 180-4:

http://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.180-4.pdf

 

When a Web User enters his/her password in the e-Business login control, the system encrypts that password using the same encryption approach and then the hashed value is compared with the value stored in the database. If they are the same, the login is successful.

...