I want to encrypt password at client side and decrypt password using asymmetric keys

Question

I have to encrypt password form client side and decrypt it on server side. Then this decrypted password is passed through ldap. I get true or false in return as response. I cannot use MD5 as password cannot be retrieved form that. Is there any algorithm or api that can be used to encrypt and decrypt the same.

I am using ssl. We have a guideline that with ssl I have to do encrypt the password also. — Gaurav Chaudhary, Jun 12 '15 at 05:32
Then challenge the guideline. Client-side encryptions is pretty pointless anyway. What's the point of encrypting something that's already encrypted? — , Jun 12 '15 at 05:43
I will try to challenge the guideline. Hope it will work. But in the mean time want to find a work around. — Gaurav Chaudhary, Jun 12 '15 at 06:15

score 0 · Answer 1 · edited May 23 '17 at 10:26

0

I don't suggest password encryption on client side (and really, really don't suggest writing own). Using SSL for login, then handling password things in your back-end is the way to go.

If no other choice and need JS encryption, here are some SO discussions which might help:

edited May 23 '17 at 10:26

Community

1
1

answered Jun 12 '15 at 05:37

DDan

8,068
5
33
52

I want to encrypt password at client side and decrypt password using asymmetric keys

1 Answers1