New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

#

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Jump to bottom

Using of BASE64 Encoding for storage of password and retrieval of password #2

Open

LennonCMJ opened this issue Jan 20, 2019 · 0 comments

LennonCMJ commented Jan 20, 2019

The application uses B64 encoding for storage of password
Obscuring a password with a trivial encoding does not protect the password.

https://cwe.mitre.org/data/definitions/261.html
https://paragonie.com/blog/2015/08/you-wouldnt-base64-a-password-cryptography-decoded

# for free to join this conversation on GitHub. Already have an account? # to comment