> I'm building a web application for one of my clients with django. But > I need to do something that I have never did before and I am somehow > really short on time to learn it. > > So I am looking for someone who has experience with encryption/ > security in python. It is to be incorporated into my django app.
Since this is more of a Python issue than a Django issue, you might get an improved response by asking on comp.lang.python or the more-specific Python-Crypto mailing list [1] Andrew Kuchling's pycrypto module is the popular solution: apt-get install python-crypto or snag it from [2] (as referenced from [3]) and of most interest, the Cipher and/or PublicKey sub-modules. > What's need to be done : > - Take a message, encrypt it using a secure method (should be better > or equal than OTP), return the encrypted message. > What should be considered: > - The user who receives the encrypted message, should be able to > uncrypt it into his Windows workstation. I'm looking for a existing > software that can do the job. You leave a bit of ambiguity here. The first item of importance is whether you use a public-key crypto scheme (unsurprisingly, the PublicKey module) or a secret-key crypto scheme (the Cipher module). How does the key get to the recipient? If your plan is to encrypt it, you have a chicken-and-egg problem... :) If, however, you can convey the secret shared-key between the parties, Blowfish and DES3 are popular choices and likely to be implemented in client software. Public-key cryptography is often the solution to the aforementioned chicken-and-egg problem as it doesn't require a shared secret. It's also frequently built into email software (or available as a plugin). This allows for a simple means by which you gather the public-keys of your recipients, and are a click or two away from encrypting the message that they can decrypt with their private key. Andrew's documentation[4] on the pycrypto module is excellent. From what I understand of your undertaking, public-key is a good way to go. > If you're are up to the task and want to make extra money just let me > know. -tim [1] http://listserv.surfnet.nl/archives/python-crypto.html [2] http://www.amk.ca/python/code/crypto.html [3] http://docs.python.org/lib/crypto.html [4] http://www.amk.ca/python/writing/pycrypt/ --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Django users" group. To post to this group, send email to django-users@googlegroups.com To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/django-users?hl=en -~----------~----~----~----~------~----~------~--~---
