Google App Engine - hash password on server

Question

I have recently started to learn about google app engine. I have encountered a problem. How do hash a password on google app engine? Im planning to pass password to the datastore. There I will hash the password and store the hash? Any tips or thoughts?

thx all!

Answer 1

Since you are looking at implementing your own custom login, you can definitely use popular hashing algorithms for the same. You can use the MessageDigest classes for teh same. Alternately, 3rd party libraries also exist, which you could use. Eg Jasypt library

Answer 2

If you're not sure what you're doing, you're best of relying on a library. Having said that, there are great code samples for password management on the owasp site.

For example, here is a page with code samples on how to manage this correctly and a good explanation of all the element requires. You'll need to adapt the code for storage on appengine, or just use CloudSQL