I'm sure its obvious, but I was wondering, what is the primary reason 3DES encryption is not used for storing passwords in the database?
My understanding is that 3DES is a strong encryption? So I can only think that the reason it is not used is because its encrypted not hashed, so that if the system was compromised the hacker could find the key used to encrypt and use it to decrypt?
The other reason being in privacy of information, even the database owner should not have the ability to see the users passwords, as they are often the same password used everywhere.
Is there any other reasons why it isn't used? Is it easier to brute then SHA?
NOTE: I am not using 3DES, but my company previously did. It was just a question out of curiousity.