Re:Peppering (Password Storage)
by Tostino on Thursday July 02, 2020 @03:15PM
(#23716888)
That depends, you can symmetrically encrypt and decrypt in postgres using functions.
For user input like this, you could pass it in as in array that you unnest in a sub-query, and you can then join to that for your pepper for each user ID/password combination which can be passed into the decrypt function.
For user input like this, you could pass it in as in array that you unnest in a sub-query, and you can then join to that for your pepper for each user ID/password combination which can be passed into the decrypt function.