I'm not very familiar with encryption and new to this, I'm just learning it right now by code review of one of the class we have in an application to encrypt a password using AES. Would anyone explain to me why do we need to have salt and RFC.

Example Snippets: passing parameters compose of input, salt and rfc string.

public static string AesEncrypt(string input, string salt, string rfcpassword)
  //code here...
  • Do you know what that "rfc" stands for? – user49075 Dec 4 '14 at 2:31
  • that's the thing I don't know :) – rpm07 Dec 4 '14 at 2:39
  • It would help to see more code, but it's probably the encryption key – atk Dec 4 '14 at 3:44
  • Do not encrypt passwords. Hash them. Read this: crackstation.net/hashing-security.htm RFCs are "Requests for Comments," the standards documents of the Internet. en.wikipedia.org/wiki/Request_for_Comments – Bob Brown Dec 4 '14 at 4:21
  • 1
    Could "salt" be the IV named by someone who doesn't know what an IV is? – cpast Dec 4 '14 at 6:14

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.