Re: searching for encrypted fields in data columns

From: S. Davis <sadavis53_at_netscape.net>
Date: 20 Apr 2004 22:26:01 -0700
Message-ID: <31478145.0404202126.51d6c504@posting.google.com>

"David Portas" <REMOVE_BEFORE_REPLYING_dportas_at_acm.org> wrote in message news:<RfSdnZ8R0vupwe7dRVn-ig_at_giganews.com>...
> > advantage is that no-one knows the key in our binary, only encrypted
>
> Except someone who (legitimately or illegitimately) has the binary and can
> therefore hack *any* users password... Or someone who hacks the users
> machine... Or hostile code on the users machine... etc, etc.

The binary does not have to be on an accessible machine. It can reside in the same database as the encrypted data.

With an Oracle, Informix or DB2 database, it's possible to embed Java classes in the database because the servers include a Java VM. Received on Wed Apr 21 2004 - 00:26:01 CDT