Encryption and Decryption for Passwords

Problem:

Password Mismatch occurs when tried to login through RASP Application.

Solution:

We have added encryption and decryption methods to password field. During the time of sign up the the password from the request body is encrypted and stored in a custom field. The time stamp is used as a key for encryption and decryption. It is also stored in a custom field.

For encryption and decryption we can use the following function:

var XORCipher = {
    encode: function encode(key, data) {
        data = this.xor_encrypt(key, data);
        return this.b64_encode(data);
    },
    decode: function decode(key, data) {
        data = this.b64_decode(data);
        return this.xor_decrypt(key, data);
    },
    b64_table: "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",
    b64_encode: function b64_encode(data) {
        var o1,
            o2,
            o3,
            h1,
            h2,
            h3,
            h4,
            bits,
            r,
            i = 0,
            enc = "";
        if (!data) {
            return data;
        }
        do {
            o1 = data[i++];
            o2 = data[i++];
            o3 = data[i++];
            bits = o1 << 16 | o2 << 8 | o3;
            h1 = bits >> 18 & 0x3f;
            h2 = bits >> 12 & 0x3f;
            h3 = bits >> 6 & 0x3f;
            h4 = bits & 0x3f;
            enc += this.b64_table.charAt(h1) + this.b64_table.charAt(h2) + this.b64_table.charAt(h3) + this.b64_table.charAt(h4);
        } while (i < data.length);
        r = data.length % 3;
        return (r ? enc.slice(0, r - 3) : enc) + "===".slice(r || 3);
    },
    b64_decode: function b64_decode(data) {
        var o1,
            o2,
            o3,
            h1,
            h2,
            h3,
            h4,
            bits,
            i = 0,
            result = [];
        if (!data) {
            return data;
        }
        data += "";
        do {
            h1 = this.b64_table.indexOf(data.charAt(i++));
            h2 = this.b64_table.indexOf(data.charAt(i++));
            h3 = this.b64_table.indexOf(data.charAt(i++));
            h4 = this.b64_table.indexOf(data.charAt(i++));
            bits = h1 << 18 | h2 << 12 | h3 << 6 | h4;
            o1 = bits >> 16 & 0xff;
            o2 = bits >> 8 & 0xff;
            o3 = bits & 0xff;
            result.push(o1);
            if (h3 !== 64) {
                result.push(o2);
                if (h4 !== 64) {
                    result.push(o3);
                }
            }
        } while (i < data.length);
        return result;
    },
    keyCharAt: function keyCharAt(key, i) {
        return key.charCodeAt(Math.floor(i % key.length));
    },
    xor_encrypt: function xor_encrypt(key, data) {
        var rta = [];
        for (var i = 0; i < data.length; i++) {
            var c = data[i];
            rta.push(c.charCodeAt(0) ^ this.keyCharAt(key, i));
        }
        return rta;
    },
    xor_decrypt: function xor_decrypt(key, data) {
        var rta = [];
        for (var i = 0; i < data.length; i++) {
            var c = data[i];
            rta.push(String.fromCharCode(c ^ this.keyCharAt(key, i)));
        }



        return rta.join("");
    }
};

For Encryption :

var timeStamp = Date.parse(new Date()).toString();
var encrypt_data = XORCipher.encode(timeStamp, managerPassword);

For Decryption:

var managerPassword = XORCipher.decode(timeStamp, managerPassword);