I know it's generally bad to store password in the clouds, and that I should be using salted-hashed password only.
I'm making an application that will authenticate a user (with salted-hash), and then needs to return the credential of all their ip-cameras from the cloud database. For obvious reasons the camera password should not be hashed, neither saved as plain text as they are right now during development.
Of course, I will use HTTPS. But I'm concerned about the server-side, in case its security will be compromised, and I don't want all the password in plain text, naturally.
As I'm not an expert in cryptography (and information security in general) I am having a bad time trying to solve this.
What is the best cryptographic algorithm for this case? I've searched for password-based-encryption and authenticated-encryption but I don't like to add extra keys and prefer to use the user master password, saved as salted-hash (ie. Secret Key Cryptography (SKC) with a single key to encode/decode).
Can I ask some directions here? I don't need anything super-strong, but maybe something not too easy to crack, and not too much difficult to implement as a newbie