blocks|key|1999265|text|方法3的主要问题是，您将包含密码的文件的密钥存储在哪里？您可以在方法2中使用Base64，但这很容易“解密”。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1999266|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|D|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|E|8|@]|9|@]|A|$]]]|C|$]]

The main problem with approach 3 is that, where do you store the key to the file that does contain the passwords? You could use Base64 for approach 2 but that very easy to "decrypt".

blocks|key|766799|text|这里不应该有任何问题。您必须使用足够强的加密方案。您正被委托处理敏感数据，您必须尽一切可能保护它。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|766800|如果使用的是Windows，则可以利用DPAPI加密AESkey并将其存储在注册表中。Perl具有与Win32库交互的模块。|766801|最好的加密是主观的，但是AES+128在2009年1月已经足够强到可以加密您的数据。|766802|如果用户不完全理解他们正在做什么，即使是最好的加密方案也可能被击败。|766803|entityMap^0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|J|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|K|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|L|8|@]|9|@]|A|$]]|$1|F|3|G|5|6|7|M|8|@]|9|@]|A|$]]|$1|H|3|-4|5|6|7|N|8|@]|9|@]|A|$]]]|I|$]]

There should be no question here. You must use a sufficiently strong encryption scheme. You are being entrusted with sensitive data, and you must do everything possible to secure it. 

If you are using Windows, you can leverage DPAPI to encrypt the AESkey and have it stored in the registry. Perl has modules to interact with Win32 libraries.

Best encryption is subjective, however AES 128 is sufficiently strong as of Jan 2009 to encrypt your data.

Even the best encryption schemes can be defeated if the user does not fully understand what they are doing.

blocks|key|465157|text|有一些运行在Windows上的Perl加密包，您可以使用ActivePerl包管理器下载PPM。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|465158|您还可以使用这些模块的纯Perl版本(查找以_PP结尾的名称)。|465159|我在CPAN上找到了这些模块：|465160|地窖：：河豚|unordered-list-item|offset|length|465161|地窖：：Rijndael|465162|entityMap|0|LINK|mutability|MUTABLE|url|http://search.cpan.org/~dparis/Crypt-Blowfish-2.12/|1|http://search.cpan.org/~bdfoy/Crypt-Rijndael-1.07/^0|0|0|0|0|6|0|0|0|C|1|0^^$0|@$1|2|3|4|5|6|7|W|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|X|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|Y|8|@]|9|@]|A|$]]|$1|F|3|G|5|H|7|Z|8|@]|9|@$I|10|J|11|1|12]]|A|$]]|$1|K|3|L|5|H|7|13|8|@]|9|@$I|14|J|15|1|16]]|A|$]]|$1|M|3|-4|5|6|7|17|8|@]|9|@]|A|$]]]|N|$O|$5|P|Q|R|A|$S|T]]|U|$5|P|Q|R|A|$S|V]]]]

There are a few Perl encryption packages that run on Windows, you can download the PPMs with ActivePerl package manager.

You can also use the pure Perl version of those modules (look for the name ending in _PP).

I found these modules on CPAN: 

<ul>
<li><a href="http://search.cpan.org/~dparis/Crypt-Blowfish-2.12/" rel="nofollow noreferrer">Crypt::Blowfish</a></li>
<li><a href="http://search.cpan.org/~bdfoy/Crypt-Rijndael-1.07/" rel="nofollow noreferrer">Crypt::Rijndael</a></li>
</ul>

blocks|key|1999443|text|显然，你是对的，#1出局了。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1999444|第二种也是出于同样的原因。它不安全。|1999445|至于#3，我是否可以建议，这也是一个。解密密码会使其进入更易受攻击的状态，以便进行比较。但是，如果您要这样做，我建议您在Crypt：：密码块链中使用Crypt::CBC。|offset|length|1999446|建议#4:不要存储密码用于检索、解密，然后进行比较，如#3所示。使用奥森：：密码是一个相当完整和灵活的Perl模块，它允许您比较输入的密码而不对原始密码进行解密/解码。另见如何在Perl+CGI程序中加密和解密密码？|1999447|entityMap|0|LINK|mutability|MUTABLE|url|http://searchsecurity.techtarget.com/definition/cipher-block-chaining|1|http://search.cpan.org/~zefram/Authen-Passphrase-0.008/lib/Authen/Passphrase.pm|2|https://stackoverflow.com/questions/3675917/how-can-i-encrypt-and-decrypt-passwords-in-a-perl-cgi-program/3676402#3676402^0|0|0|1V|4|0|0|Y|6|1|2E|M|2|0^^$0|@$1|2|3|4|5|6|7|V|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|W|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|X|8|@]|9|@$F|Y|G|Z|1|10]]|A|$]]|$1|H|3|I|5|6|7|11|8|@]|9|@$F|12|G|13|1|14]|$F|15|G|16|1|17]]|A|$]]|$1|J|3|-4|5|6|7|18|8|@]|9|@]|A|$]]]|K|$L|$5|M|N|O|A|$P|Q]]|R|$5|M|N|O|A|$P|S]]|T|$5|M|N|O|A|$P|U]]]]

Obviously, you are correct #1 is out.

And #2 is out as well for essentially the same reason. It is not secure.

As for #3, might I suggest that this is also out. Decrypting the password brings it into a more vulnerable state for comparison. BUT, if you are going to do this may I suggest using Crypt::CBC WITH Crypt::Blowfish for <a href="http://searchsecurity.techtarget.com/definition/cipher-block-chaining" rel="nofollow noreferrer">Cipher Block Chaining</a>.

[recommended] #4: Rather than storing passwords for retrieval, decryption, then comparison as in #3. Use <a href="http://search.cpan.org/~zefram/Authen-Passphrase-0.008/lib/Authen/Passphrase.pm" rel="nofollow noreferrer">Authen::Passphrase</a> a fairly complete and flexible Perl module that allows you to compare an entered password without decrypting/decoding the original. See Also <a href="https://stackoverflow.com/questions/3675917/how-can-i-encrypt-and-decrypt-passwords-in-a-perl-cgi-program/3676402#3676402">How can I encrypt and decrypt passwords in a Perl CGI program?</a>

I am writing a perl script that manipulates password protected zip files. Consequently I need to store &amp; retrieve passwords to do this. I have three options for storing the password:

<ol>
<li>Store in plain text. Before you jump in, I have pretty much ruled out this option.</li>
<li>Use a simple password munger to prevent casual/accidental access (even by the DBAs)</li>
<li>Use a proper encryption/decryption library, such as Blowfish or AES.</li>
</ol>

Whatever I choose must run in Perl, under Windows and be easy to use.

Any suggestions?

What is the best password encryption & decryption library to use with Perl?

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

我正在编写一个perl脚本，它操作受密码保护的zip文件。因此，我需要存储和检索密码才能做到这一点。我有三个存储密码的选项：以纯文本存储。在你加入之前，我已经排除了这个选择。使用简单的密码芒格以防止随意/意外访问(即使是DBA)使用正确的加密/解密库，如Blowfish或AES。无论我选择什么，都必须在Perl中运行，...

问与Perl一起使用的最佳密码加解密库是什么？
EN

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问与Perl一起使用的最佳密码加解密库是什么？EN