[PySide] secure password handling

[Srini Kommoori]

For a desktop application, I would recommend using keyring
http://pypi.python.org/pypi/keyring

For file level password application, I would use PBKDF2 with very high
iteration count. For my application, Safebox, I have used this method.
Here are the details.
http://safebox.fabulasolutions.com/p/safebox-crypto-architecture.html

all the best

On Jun 15, 2012, at 12:52 AM, Henry Gomersall <heng at cantab.net> wrote:

> On Fri, 2012-06-15 at 11:50 +1200, Frank Rueter | OHUfx wrote:
>>
>> I'm wondering about the best way to handle password input in PySide.
>> I know about python's hashlib, but am wondering if there is a better
>> way
>> to provide security between the user's input into a PySide widget and
>> the hashing. A friend was wondering about a precompiled widget that
>> does
>> the hashing directly so the password is never once stored anywhere as
>> plain text.
>>
>> What are people's approaches for this?
>
> so, in light of the recent LinkedIn debacle, the following was brought
> to my attention:
>
> http://codahale.com/how-to-safely-store-a-password/
>
> I'm not a security expert, which is why I feel the need to listen to all
> the arguments!
>
> Cheers,
>
> Henry
>
> _______________________________________________
> PySide mailing list
> PySide at qt-project.org
> http://lists.qt-project.org/mailman/listinfo/pyside