encrypt at javascript and descrypt at server side asp.net

[Zeyad Jalil]

Hi, I want to encrypt a password at client side (javascript) and decrypt the password again in the server side (Asp.Net). Please give me a sample or the best algorithm to do that. Thanks All

[Lost User]

No, you don't, passwords should be hashed not encrypted. If you can decrypt the password then so can a hacker.

[CAReed]

Since the encryption key will be needed by both client and server, how will be able to share the key with both without exposing it to the hacker community at large? The answer is that you cannot, especially since the client will likely have the decryption key (or same key if you're using symmetric encryption) exposed and vulnerable. As Richard suggested, use a hash algorithm instead, so that you can perform the same hashing on the server and then compare the hash values on the server-side. Just do a search for JavaScript hashing functions and use the corresponding algorithm built into .NET.

Christopher Reed "The oxen are slow, but the earth is patient."

[Richard Deeming]

Get an SSL[^] certificate installed on your site, and make sure your page is only loaded over HTTPS[^]. That way, the system automatically encrypts any communication between the client and the server, and your code doesn't need to change.

---

"These people looked deep within my soul and assigned me a number based on the order in which I joined." - Homer

[ZurdoDev]

Most logical answer given the information. :thumbsup:

There are only 10 types of people in the world, those who understand binary and those who don't.