Encrypt / Decrypt help

Och. That will take some time. I haven't created the user add/edit form, yet. :( And I've got other things that have to be finished by tomorrow morning.

I'll get that done ASAP afterwards, though, and let you know if that made any difference.

Thanks, again, for your thoughts and advice.

^_^

But I have removed the trim() from anywhere outside the Encrypt() tag for password.

<cfset session.user.username = trim(form.username) />
<cfset session.user.password = Encrypt(trim(form.password), request.cryptKey, request.cryptAlgorithm) />
<cfset session.user.SQLpassword = session.user.password />
<cfquery name="checkLogin" dbtype="odbc" datasource="#request.data_source#">
EXEC cpwr_adm_check_login @un='#session.user.username#', @pw='#session.user.password#'
</cfquery>
<cfdump var="#checkLogin#">
direct encrypted pw is <cfdump var="#session.user.SQLpassword#"><br>
db retrieved pw is <cfdump var="#checkLogin.userPW#"> <-- Error here, no records returned because no match
<cfoutput>
direct password is #Decrypt(session.user.SQLpassword, request.cryptKey, request.cryptAlgorithm)#
database password is #Decrypt(checkLogin.userPW, request.cryptKey, request.cryptAlgorithm)#
Comparison = #compare(session.user.SQLpassword,checkLogin.userPW)#

^_^

Okay.. here's what I've got, currently:
STORED PROCEDURE:
CREATE PROCEDURE dbo.check_login
@un nvarchar(50),
@pw nvarchar(100)
AS

DECLARE @statusCode int
SET @statusCode='0'
IF EXISTS (
SELECT [adminID]
FROM [cpwr_org_01].[dbo].[cpwr_admin_users]
WHERE [userName] = @un AND [userPW] = @pw
)
BEGIN
SET @statusCode='1'

SELECT [adminID], [firstName], [lastName], [userName], [userLevel], [datecreated], [lastLogin], [isActive], @statusCode as statusCode, [userPW]
FROM [cpwr_org_01].[dbo].[cpwr_admin_users]
WHERE [userName] = @un AND [userPW] = @pw AND [isActive] = 1
END
ELSE
BEGIN
SELECT @statusCode as statusCode
END

IF (@statusCode = '1')
BEGIN

UPDATE [cpwr_org_01].[dbo].[cpwr_admin_users]
SET [lastLogin] = getdate()
WHERE [userName] = @un AND [userPW] = @pw

END
GO

APPLICATION.CFM
<cfset request.cryptAlgorithm = "BLOWFISH" />
<cfset request.cryptKey = "8charkey" />

LOGINACTION.CFM
<cfset session.user.username = trim(form.username) />
<cfset session.user.password = Encrypt(trim(form.password), request.cryptKey, request.cryptAlgorithm) />
<cfset session.user.SQLpassword = session.user.password />
<cfquery name="checkLogin" dbtype="odbc" datasource="#request.data_source#">
EXEC cpwr_adm_check_login @un='#session.user.username#', @pw='#trim(session.user.SQLpassword)#'
</cfquery>
direct encrypted pw is <cfdump var="#session.user.SQLpassword#"><br>
db retrieved pw is <cfdump var="#checkLogin.userPW#">

This is what displays when I run the page:
direct encrypted pw is 0L42&E!R11!?XN3Z#X#$J;
db retrieved pw is 0L42&E!R11!?XN3Z#X#$J;

According to this, they are identical. But when I run the other page that attempts to decrypt, I get this:
An error occurred while trying to encrypt or decrypt your input string: The input and output encodings are not same..
72: Password for this account is #Decrypt(getAdmin.userPW, request.cryptKey, request.cryptAlgorithm)#

STORED PROCEDURE:
CREATE PROCEDURE dbo.get_admin_edit
@adminID int
AS

SELECT [adminID], [firstName], [lastName], [userName], [userPW], [userLevel], [datecreated], [lastLogin], [isActive], [userEmail]
FROM [cpwr_org_01].[dbo].[cpwr_admin_users]
WHERE adminID = @adminID
GO

EDIT PAGE:
Password for this account is #Decrypt(getAdmin.userPW, request.cryptKey, request.cryptAlgorithm)#

^_^

That's just it. I am using a key, and using BLOWFISH. Why it's working, now, I don't know; but it wasn't, before.

application.cfm
<cfset request.cryptAlgorithm = "BLOWFISH" />
<cfset request.cryptKey = "16characterskey1" />

loginaction.cfm
<cfset session.user.username = trim(form.username) />
<cfset session.user.password = Encrypt(trim(form.password), request.cryptKey, request.cryptAlgorithm) />
<cfset session.user.SQLpassword = session.user.password />
<cfquery name="checkLogin" dbtype="odbc" datasource="#request.data_source#">
EXEC check_login @un='#session.user.username#', @pw='#trim(session.user.SQLpassword)#'
</cfquery>
<cfoutput>password is #Decrypt(session.user.SQLpassword, request.cryptKey, request.cryptAlgorithm)#</cfoutput>
<cfdump var="#checkLogin#"><cfabort>

I'm stumped, but not questioning it. It is working, now. (shrug) Without GenerateSecretKey().

Thanks,

^_^

I've tried it both with and without the URLEncodedFormat(); with and without defining the algorithm, the encoding; the same result every time - every click of the submit button dumps the query result (including the query, itself) and shows that the encrypted password value is never the same, twice. I'll include three results, here:

#1
EXEC check_login @un='administrator', @pw='0JD%2FDM%5C%3EH%25H%3AQ%20BI%5C%3CN3%3F%20P%20%20%0A'

#2
EXEC check_login @un='administrator', @pw='02M%3A%27NC%5BGH%3D75CSV%25VHF%2FBP%20%20%0A'

#3
EXEC check_login @un='administrator', @pw='0J%3D%2DDGS%3A%25%2C%21DR%3A%21%27O%2CWU4%3B%40%20%20%0A'

Now without the URLEncodedFormat():

#1
EXEC check_login @un='administrator', @pw='0E Y,/@2L^K"^ZGA(W00W@@'

#2
EXEC check_login @un='administrator', @pw='0F@;IP0''7K<I6,1?*I,MS/@'

#3
EXEC check_login @un='administrator', @pw='0/%EVXY@T&Y0?Y_7O#@YXG@'

If you are familiar with proper encrypt/decrypt usage, could you please post some sample code? I tried following the example in livedocs and that isn't working, either.

Thanks,

^_^