Re: IDS10 and Encryption

ENSSSM? Is that the AES or 3DES encryption in the engine? (Sorry I know the feature, not the buzz words. ;-) Yes, I'm using it. I have a client where I needed to authenticate the user so that I could limit what they saw and limit others from seeing their work. (Its a sales force automation tool). Also managers can see what their team(s) are doing. So I built a security/authentication table. I did field level encryption (AES) where the user's password was encrypted with the password as the key. (simple and very effective.) If the user forgot their password or needed to be locked out of the app, the administrator or her manager could lock that person out. (Permission based). Very effective. The only major drawback to using encryption is that you can't index on the column. (Unless you want to go in to writing your own index type and overload the column type ... ;-) What was your intended app? -G >From: Manoj Mohan <manojm@us.ibm.com> >To: colin@colindawson.com >CC: informix-list-bounces@iiug.org, informix-list@iiug.org >Subject: Re: IDS10 and Encryption > >I am assuming that you are talking about Encryption CSM (ENCCSM) > >Nothing in particular.. but if you just want to encrypt just the password >you can use the other CSM, Simple Password CSM >(This will save the overhead of encrypting everything) >Also, there are four modes for each cipher.. ECB mode is very weak, so >preferably don't use that. >Use the same Mackey file at both ends. > >Manoj > > > > > Colin Dawson > <cjd_1955@hotmail > .com> To > Sent by: <informix-list@iiug.org> > informix-list-bou cc > nces@iiug.org > Subject > IDS10 and Encryption > 10/09/2007 09:20 > AM > > > Please respond to > colin@colindawson > .com > > > > > > > >Is anyone using this feature? If so what are your experiences, any >pitfalls? > > > >Regards > >Colin > > >There are 10 types of people in the world, those that understand binary and >those that don't > > >_________________________________________________________________ >Feel like a local wherever you go. >http://www.backofmyhand.com >_______________________________________________ >Informix-list mailing list >Informix-list@iiug.org >http://www.iiug.org/mailman/listinfo/informix-list ><< graycol.gif >> ><< pic01886.gif >> ><< ecblank.gif >> >_______________________________________________ >Informix-list mailing list >Informix-list@iiug.org >http://www.iiug.org/mailman/listinfo/informix-list _________________________________________________________________ Boo!'Scare away worms, viruses and so much more! Try Windows Live OneCare http://onecare.live.com/standard/en-us/purchase/trial.aspx?s_cid=wl_hotmailnews