WebApp Sec mailing list archives

Re: Encrypted storage


From: Shirokov Roman <forward () vlz ru>
Date: Thu, 9 Sep 2004 15:29:44 +0400

Hello Jeffrey,

Thursday, September 9, 2004, 12:38:53 AM, you wrote:



JK> I was wondering (because customers have asked me) whether
JK> anyone is configuring their database to store all information
JK> encrypted. Databases have this capability but the overhead can be
JK> so heavy that vendors don't recommend using it generically. Also,
JK> if most of the data is not sensitive it is a lot of work to
JK> protect small amounts of data. Is anyone aware of someone using
JK> this capability? Under what circumstances? What's the performance
JK> hit? What other gotchas? How about encrypted communication to the
JK> DB from the app server?

I'm interesting, if somebody now, how could I implement
such thing's (store all information encrypted)
using perl and what cryptoalgorithms are best for that?


-- 
Best regards,
 Shirokov Roman                       
 Network Administrator
 e-mail:forward () vlz ru 

 Key fingerprint 64F8 239D 2176 AFB8 CAB9  F58C B580 F16E 28F5 A96E

 Stick around; I may need an alibi...
 


Current thread: