Page History

MITRE CWE

CWE -ID 256, "Plaintext Storage of a Password"

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="33ec041d17ff4692-5e11a7e8-44b7403d-9a8d8f06-44eaa92697e3b3a741caa39f"><ac:plain-text-body><![CDATA[

[SD:[API 2006

AA. Bibliography#API 06]]

Class java.security.MessageDigest

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="da13334dc4159b57-bb94b63a-4d3b4912-a3d5b047-99dacf8074a947637ab6b649"><ac:plain-text-body><![CDATA[

[SD:[API 2006

AA. Bibliography#API 06]]

Class java.lang.String

]]></ac:plain-text-body></ac:structured-macro>

http://www.javapractices.com/topic/TopicAction.do?Id=216

Passwords never in clear text

http://en.wikipedia.org/wiki/Salt_(cryptography) 

Salt (cryptography)

http://en.wikipedia.org/wiki/Cryptographic_hash_function 

Cryptographic hash function

http://nsa.gov/