Subject Re: [firebird-support] data encryption
Author Ann W. Harrison
Mitchell Peek wrote:
>>
> Any suggestions on the best means of implementing encryption (any, not
> necessarily blowfish) of this sort? UDF? trigger? etc? How does
> one go about implementing such a thing and making this workable?
>

If there were an easy answer to that question, Firebird would do
encryption itself. The hard problem is key management. No doubt
the public/private key pair algorithms are a solution - though I
haven't seen exactly how it would work. A second problem is
the level of encryption you choose - the really solid ones are
very slow - at least for database applications. A third problem
is indexing - if the encrypted data doesn't sort the same way
as non-encrypted data (and it won't), range retrievals won't
work.

Regards,


Ann