RE: IBM Database Encryption Expert support for IDS

Gee, If I encrypt something on my linux/unix box, root can't read it either, unless root knows the key. As to encrypting chunks, there's another way. Use a cooked file system where the file system writes are encrypted. (This has been around for the past couple of years.) Again, you're going to have to buy some special hardware so that you don't take a performance hit. If memory serves, someone was asking about HP and a product sometime last year. I'm sorry if you drank the blue cool-aid, there is nothing new here except that it took this long for IBM to realize that security is a major selling point, something that I actually preached to Diane F. (then VP of Marketing) and the I.Sell crew prior to the '98 shareholders meeting. One of the points that have to be made is that there are a couple of levels of security and encryption. Encryption from the disk to the engine. Encryption from the engine to the app/app server. Then if app server/ encryption to the client. Adding encryption adds costs. Depending on what you are doing, there has to be a conscious decision as to what level of encryption and costs you are willing to take. A POS system doesn't need to have all of its writes encrypted. Column encryption and index encryption would suffice. (If index encryption was done properly.) The key is that most companies will tend to go for the overkill because its easier to buy larger machines, switch to cooked chunks and then buy the additional encryption add on boards. This encrypts the database so that if stolen its useless. This too is a knee jerk response in that your database server is usually sitting on a box in a locked room. IDS allows you to encrypt row level data. Not just columns. There's an advantage to this if done properly. > Date: Wed, 29 Oct 2008 11:13:22 +0000 > From: domusonline@gmail.com > To: informix-list@iiug.org > Subject: Re: IBM Database Encryption Expert support for IDS > > If you care to read the details, nobody is talking about encrypting a > column. It's about encrypting the chunks in a transparent way to the > oninit processes. > And you didn't get the point about root access. Maybe it's my English. > The idea is that root won't be allowed to read the encrypted data. > If you can spare 10 minutes see the video at: > > http://informix-technology.blogspot.com/2008/10/encryption-all-your-data-base-are-not.html > > Regards. > > On Wed, Oct 29, 2008 at 1:47 AM, Ian Michael Gumby <im_gumby@hotmail.com> wrote: > > if you look past the marketing blurb, more smoke than mirrors. > > Without encryption hardware, you're going to take a huge performance hit if > > you're encrypting a column that you index. > > > > And why would you need root access for encryption? > > > > > >> From: domusonline@gmail.com > >> Subject: IBM Database Encryption Expert support for IDS > >> Date: Wed, 29 Oct 2008 01:35:51 +0000 > >> To: informix-list@iiug.org > >> > >> IBM Database Encryption Expert support for IDS: > >> > >> http://www.ibm.com/software/data/db2imstools/database-encryption-expert/ > >> > >> The latest fixpack (1.1.3) introduces support for Informix 11.10FC2 and > >> 11.50. > >> This means transparent data encryption without root access... > >> > >> Regards > >> -- > >> Fernando Nunes > >> Portugal > >> > >> http://informix-technology.blogspot.com > >> My email works... but I don't check it frequently... > >> _______________________________________________ > >> Informix-list mailing list > >> Informix-list@iiug.org > >> http://www.iiug.org/mailman/listinfo/informix-list > > > > > > ________________________________ > > You live life beyond your PC. So now Windows goes beyond your PC. See how > > > > -- > Fernando Nunes > Portugal > > http://informix-technology.blogspot.com > My email works... but I don't check it frequently... > _______________________________________________ > Informix-list mailing list > Informix-list@iiug.org > http://www.iiug.org/mailman/listinfo/informix-list _________________________________________________________________ Store, manage and share up to 5GB with Windows Live SkyDrive. http://skydrive.live.com/welcome.aspx?provision=1?ocid=TXT_TAGLM_WL_skydrive_102008