Professional Web Applications Themes

Encrypt a field for tion over public network? - MySQL

for example, i have table containsa field - password, which is a md5 hash i have this table to te across the publich network i don't want to setup any secure channel for tion since it might cause additonal overhaded and delay... are there any workaround for making a particular field more secure? one way i am thinking is to create a mysql custome function, which encrypt the hash it work as following: (php) $password = "password" $password = encrypt_me($password); e.g. update tableA set password = md5( decrypt_me($password) ); which decrypt_me() and encrypt_me, but at different language, one for php ...

  1. #1

    Default Encrypt a field for tion over public network?

    for example, i have table containsa field - password, which is a md5
    hash

    i have this table to te across the publich network

    i don't want to setup any secure channel for tion since it
    might cause additonal overhaded and delay...

    are there any workaround for making a particular field more secure?



    one way i am thinking is to create a mysql custome function, which
    encrypt the hash

    it work as following: (php)

    $password = "password"
    $password = encrypt_me($password);


    e.g.

    update tableA set password = md5( decrypt_me($password) );

    which decrypt_me() and encrypt_me, but at different language, one for
    php and one for mysql procedure, when the sql statement repliate
    across the network, people don't know the hash....

    any comments on this approach or better method?

    thanks.

    howa Guest

  2. #2

    Default Re: Encrypt a field for tion over public network?

    If you are using a good salt-ing mechanism (google for password hash
    salting if you don't do this already) on the current hash then it
    shouldn't really be an issue to transfer them as is. If you want to be
    more secure you may be able to use some of the encryption functions
    built into mysql: http://dev.mysql.com/doc/refman/5.0/en/encryption-functions.html#function_aes-encrypt.

    justin.demaris@gmail.com Guest

  3. #3

    Default Re: Encrypt a field for tion over public network?

    On 5 26 , 3 55 , "com"
    <com> wrote: 

    password is an example...for example, if i want to excrypt the phone
    no. hashing didn't work....

    the problem with mysql encryption is that the key will be visible to
    the public network during tion, so this is the reason i need to
    use my own...

    thanks anyway

    howa Guest

  4. #4

    Default Re: Encrypt a field for tion over public network?

    howa wrote: 

    Encryption will also cause some additional overhead and delay. Just pipe
    it through an encrypted tunnel like SSH.

    Cheers,
    Nicholas Sherlock
    Nicholas Guest

Similar Threads

  1. MySql tion and network speed
    By Chad J. Lemmer in forum MySQL
    Replies: 3
    Last Post: January 29th, 06:33 PM
  2. Forced tion in File tion Services
    By James in forum Windows Server
    Replies: 0
    Last Post: July 16th, 03:45 PM
  3. Replies: 0
    Last Post: September 11th, 07:55 PM
  4. tion traffic on the network has spiked up !!!
    By Madison Pruet in forum Informix
    Replies: 3
    Last Post: August 6th, 09:44 PM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139