Subject Re: [Firebird-Architect] database encryption
Author Adriano dos Santos Fernandes
On 03-11-2010 17:43, Sijun Kang wrote:
> I think we might be able to produce secure encryption under SOME
> circumstances - e.g., I want to store my personal information (many bits are
> sensitive enough to keep safe, such as bank/credit card information) on
> my laptop with peace of mind. I do not expect it be safe in all imaginable
> situations, instead I only wish:
>
> *Nobody can gain access to my data (without bruteforce
> decryption) in case I lost my laptop in power-off status*.
> This, I think, is achievable.
>
It's very simple. You don't want others to catch your database, so don't
allow anyone to be physically near the hardware it's present or
logically by file sharing.

On the contrary, if you allow such "contact", one could replace your
Firebird server and catch your key when you enter it, so nothing is secured.


Adriano