Password authentication using white-box

A white-box system for authenticating a user-supplied password, including: a password database including a salt value and an authentication value for each user; a white-box implementation of a symmetric cipher configured to produce an encrypted value by encrypting the user-supplied password using the salt value associated with the user as an encoded secret key; and a comparator configured to compare the encrypted value with the authentication value associated with the user to verify the user-supplied password. 一种用于认证用户供应的口令的白盒系统，包括：口令数据库，其包括针对每个用户的盐值和认证值；对称密码的白盒实施方案，其被配置成通过使用与所述用户相关联的所述盐值作为编码秘密密钥对所述用户供应的口令进行加密来产生加密值；以及比较器，其被配置成比较所述加密值和与所述用户相关联的所述认证值，以便验证所述用户供应的口令。