Quote:
Originally Posted by Lee  I have thought about hashing, the problem with hashing is if i hash it i can not use that value again, that value must be used by the program to access the database, as i have said the user would not know this password. |
I understand. What I was saying was to use the hash result as your key for encryption/decryption using the OTP method.
Quote:
Originally Posted by Lee If i where to encrypt it couldn't someone just decrypt it? |
Yes, anything which can be encrypted can be decrypted if the key is available. That's why I suggested having the password setup on both ends -- then it is encrypted during transit.