Re: Encrypted Fields

From: Chad Smith (chadksmith..mail.com)
Date: Thu Feb 05 2009 - 18:05:01 EST

  • Next message: Aristedes Maniatis: "Re: Encrypted Fields"

    I've been using Jasypt(.org) 1.4 for encrypting/decrypting at the app level rather than a database dependent solution. It's pretty easy to use. My only gripe is it's abnormally large, due to its dependence on icu4j. Although, they have made that jar optional w/ the newer version coupled w/ Java 6.

    -Chad

    ----- Original Message -----
    From: "Joe Baldwin" <jfbaldwi..arthlink.net>
    To: use..ayenne.apache.org
    Sent: Thursday, February 5, 2009 3:36:40 PM GMT -07:00 US/Canada Mountain
    Subject: Encrypted Fields

    What design (or pattern) is best for fields that are to be encrypted?

    MySQL has quite a few simple functions that can be used to encrypt
    data. However, when using Cayenne to fetch the data I have not found
    a simple solution.

    I have been testing using result directives and SQLTemplate, but the
    design is looking pretty messy.

    I guess the first question is: can I rely on MySQL aes_encrypt()/
    aes_decrypt() while using Cayenne or will I have to go to a java
    encryption class?

    Thanks,
    Joe



    This archive was generated by hypermail 2.0.0 : Thu Feb 05 2009 - 18:05:35 EST