RE: IDS10 and Encryption

I'm currently running 9.40.FC8 and will be upgrading to 10.00.FC5 soon, we are about to write an encryption program(s) for financial / personal customer data and was wondering if anyone had done something similar using the built-in encryption Regards Colin There are 10 types of people in the world, those that understand binary and those that don't > From: im_gumby@hotmail.com> To: manojm@us.ibm.com; colin@colindawson.com> Subject: Re: IDS10 and Encryption> Date: Wed, 10 Oct 2007 12:11:46 +0000> CC: informix-list@iiug.org; informix-list-bounces@iiug.org> > > ENSSSM?> > Is that the AES or 3DES encryption in the engine?> (Sorry I know the feature, not the buzz words. ;-)> > Yes, I'm using it.> > I have a client where I needed to authenticate the user so that I could > limit what they saw and limit others from seeing their work. (Its a sales > force automation tool). Also managers can see what their team(s) are doing.> > So I built a security/authentication table. I did field level encryption > (AES) where the user's password was encrypted with the password as the key. > (simple and very effective.) If the user forgot their password or needed to > be locked out of the app, the administrator or her manager could lock that > person out. (Permission based).> > Very effective.> > The only major drawback to using encryption is that you can't index on the > column. (Unless you want to go in to writing your own index type and > overload the column type ... ;-)> > What was your intended app?> > -G> > > >From: Manoj Mohan <manojm@us.ibm.com>> >To: colin@colindawson.com> >CC: informix-list-bounces@iiug.org, informix-list@iiug.org> >Subject: Re: IDS10 and Encryption> > >> >I am assuming that you are talking about Encryption CSM (ENCCSM)> >> >Nothing in particular.. but if you just want to encrypt just the password> >you can use the other CSM, Simple Password CSM> >(This will save the overhead of encrypting everything)> >Also, there are four modes for each cipher.. ECB mode is very weak, so> >preferably don't use that.> >Use the same Mackey file at both ends.> >> >Manoj> >> >> >> >> > Colin Dawson> > <cjd_1955@hotmail> > .com> To> > Sent by: <informix-list@iiug.org>> > informix-list-bou cc> > nces@iiug.org> > Subject> > IDS10 and Encryption> > 10/09/2007 09:20> > AM> >> >> > Please respond to> > colin@colindawson> > .com> >> >> >> >> >> >> >> >Is anyone using this feature? If so what are your experiences, any> >pitfalls?> >> >> >> >Regards> >> >Colin> >> >> >There are 10 types of people in the world, those that understand binary and> >those that don't> >> >> >_________________________________________________________________> >Feel like a local wherever you go.> >http://www.backofmyhand.com>; >_______________________________________________> >Informix-list mailing list> >Informix-list@iiug.org> >http://www.iiug.org/mailman/listinfo/informix-list>; ><< graycol.gif >>> ><< pic01886.gif >>> ><< ecblank.gif >>> > > >_______________________________________________> >Informix-list mailing list> >Informix-list@iiug.org> >http://www.iiug.org/mailman/listinfo/informix-list>; > _________________________________________________________________> Boo! Scare away worms, viruses and so much more! Try Windows Live OneCare > http://onecare.live.com/standard/en-us/purchase/trial.aspx?s_cid=wl_hotmailnews>; _________________________________________________________________ 100’s of Music vouchers to be won with MSN Music https://www.musicmashup.co.uk