Tuesday, December 22, 2009

Re: Database encryption & security

Thanks for the suggestions everyone. I'll look into it. Might be
more hassle than it's worth; on thinking about it, I don't think it
really matters if the main user has access to the DB info - he will
also have access to the code, so I guess if he wanted to, he could
code something up to get the details out!

On Dec 21, 8:39 pm, Victor <victor.sc...@critotech.com> wrote:
> You can take a look at what CritoTECH.com is offering with ezNcrypt.
> It's Transparent Data Encryption and Key Management for MySQL.  This
> means it requires no changes to your application or database to
> encrypt your data and it will allow you to encrypt specific tables
> instead of having to encrypt the entire file system.
>
> Kind regards,
>
> Victor
>
> On Dec 18, 4:43 am, WhyNotSmile <sharongilmor...@googlemail.com>
> wrote:
>
> > Hi,
>
> > I was wondering whether anyone could help me out with some database
> > encryption.  The app stores a bit of personal info in the MySQL
> > database - name, address, phone number, email address & password.  I
> > think I should probably encrypt this in the database so that even the
> > owner of the database can't see the information there.
>
> > I don't think security will be a huge issue, but all the same I think
> > it would be good to put something in place.
>
> > Anyway, I have looked online and can't really find anything to help me
> > - it's all a bit too advanced for my needs!  I thought there would be
> > a simple way of doing this, but I can't find one.
>
> > Basically, what I want is when Cake saves the data, it encrypts it
> > first, and then decrypts it when it loads it back in.  I was sure I'd
> > read this in the manual, but can't find it now!  There is stuff in
> > there about salt values, but I don't understand how that works (and
> > anyway, I set the salt value, and it clearly doesn't cause my data to
> > encrypt!).
>
> > It doesn't have to encrypt absolutely everything (some of it is just
> > random info), but if it is easier to just do the lot, then that's
> > grand.  Also, the data is in UTF-8, if that makes any difference.
>
> > So if someone could point me in the right direction, I'd be very
> > grateful.
>
> > Thank you.

Check out the new CakePHP Questions site http://cakeqs.org and help others with their CakePHP related questions.

You received this message because you are subscribed to the Google Groups "CakePHP" group.
To post to this group, send email to cake-php@googlegroups.com
To unsubscribe from this group, send email to
cake-php+unsubscribe@googlegroups.com For more options, visit this group at http://groups.google.com/group/cake-php?hl=en

No comments: