Encrypting Passwords

EFT provides the following password-encryption features:

  • Two-way TwoFish encryption cipher on passphrases that must be reversible

  • One-way hash for passphrases that do not need to be reversible

  • Encrypt all passwords used in the following areas:

    • ClientFTP.dll client authentication

    • Authmanager.dll for AD, ODBC, and LDAP authentication

    • PGP private key passphrases

    • ARM connection string password

The PCI DSS states that you should encrypt all passwords during transmission and storage on all system components.