Subject | RES: [firebird-support] Re: Encryption in firebird - Help |
---|---|
Author | Adam |
Post date | 2004-12-21T22:37:45Z |
In short, Firebird has no encryption natively, BUT it is not too hard
to add it using a UDF. Your stored procedures and triggers can call a
function inside a UDF, and the UDF can do anything it likes (except
query the database, that is not a good idea). You can therefore use an
implementation of blowfish or something like that inside the UDF.
But I am not overly sure of what this will achieve. The problem is
that someone or something will need to know the private key. If you
envisage that something to be one of your stored procedures or
triggers, then anyone who could have read the table data could
probably read the stored procedure code, get the private key, and
retrieve the info.
One option is an encrypted volume, like PGPDisk etc.
--- In firebird-support@yahoogroups.com, "Gerson Machado - Yahoo"
<gersonamach@y...> wrote:
to add it using a UDF. Your stored procedures and triggers can call a
function inside a UDF, and the UDF can do anything it likes (except
query the database, that is not a good idea). You can therefore use an
implementation of blowfish or something like that inside the UDF.
But I am not overly sure of what this will achieve. The problem is
that someone or something will need to know the private key. If you
envisage that something to be one of your stored procedures or
triggers, then anyone who could have read the table data could
probably read the stored procedure code, get the private key, and
retrieve the info.
One option is an encrypted volume, like PGPDisk etc.
--- In firebird-support@yahoogroups.com, "Gerson Machado - Yahoo"
<gersonamach@y...> wrote:
>
> Adam,
>
> Perhaps what Carlos need is like me....
>
> I need (to protect my information) to encrypt and decrypt my data when
> necessary, but I want to do this, in Firebird, not in Delphi or other
> language, native inside Firebird.
> Other thing, I need protect the relationship between all tables... like
> if I have a field in table A with information in table B I need to break
> (or encrypt) this relationship.
>
> Did y have any idea ?
>
>
> Best regards,
>
> Gerson Machado
>
>
>
> -----Mensagem original-----
> De: Adam [mailto:s3057043@y...]
> Enviada em: terça-feira, 21 de dezembro de 2004 10:20
> Para: firebird-support@yahoogroups.com
> Assunto: [firebird-support] Re: Encryption in firebird - Help
>
>
>
> What are you trying to protect? If you are just trying to hide
> passwords so they are not in plain text, then you do not need
> encryption, only a hash algorithm like SHA-1 or MD5. Hashing is
> simple, because you don't have to manage public and private keys.
> There is also no way to "break" a hashing algorithm unless you use a
> brute force approach.
>
> Is this what you need, or do you need something that is reversible
> into the original string?
>
> --- In firebird-support@yahoogroups.com, "carlos_arguilar"
> <carlos_arguilar@y...> wrote:
> >
> > Hello!
> > I have a table in my database that has a field that need
> encryption.
> > I have wrote a UDF, however, it don't work very well on firebird.
> > Anyone know a routine be able such a thing.
> > Please, help me.
> > Regards,
> > Carlos Arguilar
>
>
>
>
>
> Yahoo! Groups Sponsor
>
> ADVERTISEMENT
> HYPERLINK
> "http://us.ard.yahoo.com/SIG=129oi17k0/M=295196.4901138.6071305.3001176/
> D=groups/S=1705115386:HM/EXP=1103717984/A=2128215/R=0/SIG=10se96mf6/*htt
> p://companion.yahoo.com"click here
> HYPERLINK
> "http://us.adserver.yahoo.com/l?M=295196.4901138.6071305.3001176/D=group
> s/S=:HM/A=2128215/rand=806965071"
>
>
> _____
>
> Yahoo! Groups Links
>
>
> * To visit your group on the web, go to:
> HYPERLINK
> "http://groups.yahoo.com/group/firebird-support/"http://groups.yahoo.com
> /group/firebird-support/
>
>
> * To unsubscribe from this group, send an email to:
> HYPERLINK
> "mailto:firebird-support-unsubscribe@yahoogroups.com?subject=Unsubscribe
> "firebird-support-unsubscribe@yahoogroups.com
>
>
> * Your use of Yahoo! Groups is subject to the HYPERLINK
> "http://docs.yahoo.com/info/terms/"Yahoo! Terms of Service.
>
>
>
> --
> No virus found in this incoming message.
> Checked by AVG Anti-Virus.
> Version: 7.0.296 / Virus Database: 265.6.2 - Release Date: 20/12/2004
>
>
>
> --
> No virus found in this outgoing message.
> Checked by AVG Anti-Virus.
> Version: 7.0.296 / Virus Database: 265.6.2 - Release Date: 20/12/2004
>
>
>
> [Non-text portions of this message have been removed]