planet icon indicating copy to clipboard operation
planet copied to clipboard

Published 20 hours ago • verified publisher icon open-learning-exchange

[#6465] encrypted pin

Open lmmrssa opened this issue 5 years ago • 1 comments

lmmrssa avatar Jun 03 '20 16:06 lmmrssa

@lmmrssa @dogi Do we want to allow anyone to access the PIN?

A client supplies the key, and then gets the PIN back encrypted with that key. If I'm reading this correctly, anyone can make that request and get the PIN. Please let me know if I'm missing something.

Also let's be more careful with the term "hash" in the code because that is one-way always. This is a two-way encryption so seeing a variable HASH makes this confusing.

paulbert avatar Jun 04 '20 04:06 paulbert