BCrypt in outsystems platform (?)

BCrypt in outsystems platform (?)

  

Hi, community!!!

This is my first post, so, please, be patient with me.
I need to "encrypt" a table atribute from an entity in the database. The issue is that the security experts recommended me to hash the password using BCrypt, but i dont see any documentation about using BCrypt in the outsystems platform.

¿Do you have any idea how to implement BCrypt in outsystems platform?

Pd:Sorry about my english.
 

Hi Mario


I do not know about BCrypt, however Outystems already has MD5 and  SHA512 salted hashing functions, would this be good enough? If so, you can find them on the PlatformPasswordUtils extension

Hope this helps!

  CLSJ

Hi Mario,

To accomplish that you need to create your own extension. And if you have security experts in your team they will prefer BCrypt since its more secure than MD5 and  SHA512.

Regards,

Marcelo

Solution

Hi Mario,

If you still want it I created this implementation based on BCrypt.Net. https://www.outsystems.com/forge/Component_Overview.aspx?ProjectId=4130

Regards,

Marcelo

Solution

Mario Pradenas wrote:

Hi, community!!!

This is my first post, so, please, be patient with me.
I need to "encrypt" a table atribute from an entity in the database. The issue is that the security experts recommended me to hash the password using BCrypt, but i dont see any documentation about using BCrypt in the outsystems platform.

¿Do you have any idea how to implement BCrypt in outsystems platform?

Pd:Sorry about my english.
 

Hello Mario,

Please see below .net code for BCrypt to encrypt password.

using BCrypt.Net;

public class Hashing  
{
    private static string GetRandomSalt()
    {
        return BCrypt.GenerateSalt(12);
    }

    public static string HashPassword(string password)
    {
        return BCrypt.HashPassword(password, GetRandomSalt());
    }

    public static bool ValidatePassword(string password, string correctHash)
    {
        return BCrypt.Verify(password, correctHash);
    }
}

please create an EXTENSION in .net and used in outsystems platform.

Please read this article....

https://cmatskas.com/a-simple-net-password-hashing-implementation-using-bcrypt/

Hope this help !!!

Best Regards,

Amit Verma