Re:T-Mobile USA storing passwords in clear?
by dmdeller on Tuesday May 27, 2014 @01:27PM
(#7805629)
Where do you keep the decryption key?
If it's stored in the same place as the encrypted password, then you have gained no security over storing it in plain text.
If it's stored in a separate system, then you have substantially increased the complexity of the system, and in general, a more complex system is harder to implement securely.
If it's stored in the same place as the encrypted password, then you have gained no security over storing it in plain text.
If it's stored in a separate system, then you have substantially increased the complexity of the system, and in general, a more complex system is harder to implement securely.