[Esapi-user] ESAPI deprecated decrypt vs the new decrypt - getting a String to a CipherText

Sat Mar 24 12:09:56 UTC 2012

Hi Kevin,
I can save the string into a crypto Token - but i don't see a function 
to make a crypto token to a cipher text...
so i think this is not really helping!!
Or am I missing something important?

thanks,
Jörg

Am 24.03.2012 02:27, schrieb Kevin W. Wall:
>
> Jörg,
>
> Take a look at CryptoToken, which was designed for thins like this.
>
> If you find it too heavy weight, then look at its source code as an 
> example to show you how to do this conversion.
>
> -kevin
> Sent from my Droid; please excuse typos.
> On Mar 23, 2012 5:24 PM, "Jörg Liedl" 
> <joerg.liedl at student.htw-berlin.de 
> <mailto:joerg.liedl at student.htw-berlin.de>> wrote:
> >
> > Hi,
> >
> > i have a small problem:
> >
> > when a user registers, i send him a email with a link to click
> >
> > it looks like:
> > 
> https://domain.com/setactive.html?code=wmXgBIGwSwNrBIdSdt%2FmOcf%2Be6g3GpMg0QGMkmWWw9BmWfGWaToRqN2X0Ip1PKl5%2Bd%2F5griuEn3maAu7p8Fvtg%3D%3D
> >
> > The stuff at the end ist done by:
> >
> >            CipherText cipherText = ESAPI.encryptor().encrypt(new 
> PlainText(email));
> >            String ct = 
> ESAPI.encoder().encodeForURL(cipherText.getEncodedIVCipherText());
> >
> > So, of course if i klick the link, i have in my controller, not a 
> ciphertext, but only a String...
> >
> > Is there any possibility to transform a String to a CipherText?
> >
> > Can't find a good way to do it...
> >
> > Thanks
> >
> > Jörg
> > _______________________________________________
> > Esapi-user mailing list
> > Esapi-user at lists.owasp.org <mailto:Esapi-user at lists.owasp.org>
> > https://lists.owasp.org/mailman/listinfo/esapi-user
>

-- 
Jörg Liedl

Mobile:  +49 (0) 176 77 640 540

Xing:    https://xing.com/profile/Joerg_Liedl
FB:      https://fb.com/joerg.liedl
Twitter: https://twitter.com/joerg_liedl

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.owasp.org/pipermail/esapi-user/attachments/20120324/93faa0c3/attachment.html>