Send() a password that has been encrypted

[ChrisCEA]

Hello all,

This is my first post so forgive me in advance.

I have a program that requires the password of my domain admin account.

On line 10 I have the password, Zaq12wsx, encrypted in MD5.

When the script is ran it prompts to enter the password (as a test to make sure everything is cosure), which works. However, when I click the "Test Decrypt" button, which will eventually be turned into launching the program that requires the admin password, it does not decrypt the password.

The whole script is about 700 lines so this is just a fraction of what I have going on, but any suggestions would be great.

The end result is to have the compiled script send the Admin password whenever needed without having the password sit easily viewable in the .au3 file.

expandcollapse popup

#include
#include
#include
#include
#include
#include

Global $pc
$pc = @ComputerName
Global Const $bEncrypted = Binary("0x3fc9a732d99ed073918370c4c1de0c65")

intpasswd()
Func intpasswd()
$intpasswd = InputBox("Security Check", "Enter password to open EASI.", "", "*")
GUICtrlRead($intpasswd)
If _Crypt_HashData($intpasswd, $CALG_MD5) <> $bEncrypted Then intpasswd()
If _Crypt_HashData($intpasswd, $CALG_MD5) = $bEncrypted Then cont()
EndFunc ;==>intpasswd
Func cont()
EndFunc ;==>cont

;*****Begin GUI Creation*****
GUICreate("Welcome", 500, 700)
$decrypt = GUICtrlCreateButton("Test Decrypt", 360, 450, 120)
$pcinputbox = GUICtrlCreateInput("CEA", 180, 650, 140)
GUISetState(@SW_SHOW)



While 1
$msg = GUIGetMsg()
If $msg = $GUI_EVENT_CLOSE Then ExitLoop
If $msg = $decrypt Then decryptmsg()

WEnd

Func decryptmsg()
MsgBox(0, "Decrypted data", BinaryToString(_Crypt_DecryptData($bEncrypted,"", $CALG_MD5)))
EndFunc

[BrewManNH]

You're not encrypting the password, you're hashing it, there's no "un-hash" function and decrypt doesn't unhash the data.

[ChrisCEA]

Ok, so what would be the process for encrypting the password and then being able to send it? I looked at the Help file and can't quite understand it.

Thanks!

[BrewManNH]

If you want security in your program, then you can't send it without comprimising the security of it. Because somewhere in your script you're going to have to put the decryption key, or read it from somewhere, so that will mean someone else can find it. Using a hash like you did is one of the better ways of ensuring that you don't have to decrypt the password (or encrypt it) to verify that it's valid.

If that's not an issue for you, then you'll need to encrypt the password with _Crypt_EncryptData, and decrypt it with _Crypt_DecryptData and use a password key to do that.