Method and apparatus for implementing a pluggable password obscuring mechanism

A computer-readable storage medium storing instructions that when executed by a computer cause the computer to perform a method for implementing a pluggable password obscuring mechanism, the method comprising:

• receiving a request to obscure a password to produce an obscured version of the password, wherein the request to obscure the password includes a salt, which is an item of data associated with the password;
• if the request to obscure the password specifies a customized technique from a plurality of customized techniques for obscuring the password, wherein obscuring the password involves using the salt as an additional input to a function that obscures the password,
• loading a dynamic library that performs the customized technique, and
• using the dynamic library to obscure the password;
• if the request to obscure the password does not specify a customized technique for obscuring the password, using a default technique to obscure the password;
• receiving a request to generate the salt;
• in response to the request to generate the salt, determining if the request specifies a customized technique for generating the salt;
• if the request specifies a customized technique for generating the salt,
• loading a dynamic library that performs the customized technique for generating the salt, and
• using the dynamic library to generate the salt:
• if the request does not specify a customized technique for generating the salt, using a default technique to generate the salt;
• and
• storing the obscured password in a password store;
• whereby the customized technique for obscuring the password can be used without having to modify source code to include the customized technique.

An apparatus that provides a pluggable password obscuring mechanism, comprising:

• a receiving mechanism that is configured to receive a request to obscure a password to produce an obscured version of the password, wherein the request to obscure the password includes a salt, which is an item of data associated with the password;
• an obscuring mechanism that is configured to obscure the passwords wherein obscuring the password involves using the salt as an additional input to a function that obscures the password;
• a customization mechanism, wherein if the request to obscure the password specifies a customized technique from a plurality of customized techniques for obscuring the password, the customization mechanism is configured to load a dynamic library that performs the customized technique;
• wherein if the request to obscure the password does not specify a customized technique for obscuring the password, the obscuring mechanism is configured to use a default technique to obscure the password;
• a salt generation mechanism;
• wherein upon receiving a request to generate the salt, the salt generation mechanism is configured to determine if the request specifies a customized technique for generating the salt;
• wherein if the request to generate the salt specifies a customized technique for generating the salt, the salt generation mechanism is configured to,
• load a dynamic library that performs the customized technique for generating the salt, and to
• use the dynamic library to generate the salt;
• and
• wherein if the request to generate the salt does not specify a customized technique for generating the salt, the salt generation mechanism is configured to use a default technique to generate the salt;
• and
• a storing mechanism that is configured to store the obscured password in a password store;
• whereby the customized technique for obscuring the password can be used without having to modify source code to include the customized technique.