[Dnfbb-developers] Password Encryption/Complexity

[<dnf...@li...>]

I have created an internal stored proc for password encryption/complexity
(below), Initially I was thinking of using MD5 hash with the posibility of
adding other hash methods defined by board admin later.  I was also
wondering if we should enforce minimum length and complexity for password. 

Does anybody have any thoughts on this?  Should I just add MD5 hashing now
and leave complexity and other hashing methods till after version 1.0?

Rgds

Si


CREATE OR ALTER PROCEDURE DNFI_ENCRYPT_PASSWORD(ipPASSWORD VARCHAR(100))
RETURNS (opPASSWORD VARCHAR(100))
AS
BEGIN
  /* TODO Validate password for length and complexity? maybe */
  IF ((ipPASSWORD IS NULL) OR (ipPASSWORD = '')) THEN
    EXCEPTION EXC_DNF_INVALID_PASSWORD;

  /* TODO Encrypt and return the password */
  
  /* Return the encrypted password */
  opPASSWORD = ipPASSWORD;
  SUSPEND;
END ##