which encryption method should I use?

I'm new to this and wondering which encryption method is best to use with SA2? I followed the links provided under the getting started guide, but it's all gibberish to me. Any recommendations?

I would recommend using either SHA1 or Crypt encryption types.

Whats the diffrence between both encryption type been using sha1 since i got my power suit before that was using addt with md5 are the new ones more secure than the sha1?

they are all pretty similar, MD5 is a 128 bit encryption whereas sha1 is 160 bits.

Crypt uses a salt string for the encryption.

see the following pages for more details:

SHA-1

MD5

function.crypt.php

Realizing this thread is 8 years old, is Crypt still considered the most secure method for password use within SecurityAssist? Doing some reading, I thought it was RIHNDAEL, but the wizard wouldn't let me use that and automatically switched it to Hash. I noticed Hash uses the same string repeatedly for the same passwords, so it seems like pretty low level security. Granted, the apps I'm building aren't exactly high security needs, but the way people reuse passwords, I want to choose the most secure method availlable within WA.

Any encryption can be used. I think currently bcrypt is the latest standard. You can get that by using crypt() with the CRYPT_BLOWFISH constant.

Hi Ray

On wikipedia, it says "In Unix computing, crypt or enigma is a utility program used for encryption. Due to the ease of breaking it, it is considered to be obsolete."

Elsewhere, AES Crypt: "In the end, AES has never been cracked yet and is safe against any brute force attacks contrary to belief and arguments".

Is the webassist version the 'basic' Crypt, essentially useless, or is it similar to - or the same as - AES Crypt, a seemingly robust encryption method.

In these days of huge fines for data breaches under GDPR, I want to ensure that customer details are safely encrypted.

If not Crypt, which webassist encryption method is the most robust?

Cheers

Chris

Is this for encrypting passwords? Do you have to be able to read the data or just one-way encrypt?

Hi Ray

Passwords yes, but I'd also like to encrypt personal details (name, address etc), then decrypt them for display in the users logged in area of the site.

Cheers
Chris

If you use RIJNDAEL that is AES and allows encryption and decryption.