在其他设备上解码base64加密

Question

I am using python build in library to encode a md5 digest using base 64. Library i am using is :

      from hashlib import md5

My code to encode the "email" variable:

     apitoken = md5(email).digest().encode('base64')[:-1]

Now the problem is this "apitoken" is being sent to other device who need to decode the base64 it to get email md5.

What key should I send to them? Where is this salt value?

Answer 1

If your requirement is to send encrypted data then you should not use a one-way hashing algorithm like MD5 (which is a weak algorithm, in any case). I would recommend using well known symmetric/asymmetric algorithms like AES say from the Python Cryptography Toolkit (pycrypto)

The encrypted data can be unencrypted at the client end using an appropriate client library for that algorithm. I would also recommend reading a good book on security such as Bruce Schneier's "Applied Cryptography" to understand how to build a secure system.