Encrypted Data

[Arne]

I need to create a sql column with Encrypted Credit Card. Fortunately .Net
has a crypto API.
Where would be a good place to store the key?
Supposedly windows has a crypto store somewhere.

[Jim Brandley]

We used the MD5 hash (from a fixed plaintext string) to regenrate the key
when needed.

"Arne" <Arne@discussions.microsoft.com> wrote in message
news:460682D6-8BA3-4163-8AC6-DABCB452FE3B@microsoft.com...

> I need to create a sql column with Encrypted Credit Card. Fortunately .Net
> has a crypto API.
> Where would be a good place to store the key?
> Supposedly windows has a crypto store somewhere.

[Arne]

Jim,
Do you have a safe place to store the plaintext string?
Arne.

"Jim Brandley" wrote:

> We used the MD5 hash (from a fixed plaintext string) to regenrate the key
> when needed.
>
> "Arne" <Arne@discussions.microsoft.com> wrote in message
> news:460682D6-8BA3-4163-8AC6-DABCB452FE3B@microsoft.com...

> > I need to create a sql column with Encrypted Credit Card. Fortunately .Net
> > has a crypto API.
> > Where would be a good place to store the key?
> > Supposedly windows has a crypto store somewhere.

>
>
>

[Daniel Fisher\(lennybacon\)]

I don't wanna buy stuff in a store that stores such sensitive data. Use a
hash or leave it. Please.

--
Daniel Fisher(lennybacon)
MCP ASP.NET C#
Blog: [url]http://www.lennybacon.com/[/url]


"Arne" <Arne@discussions.microsoft.com> wrote in message
news:7B562C1E-E837-406C-AF3C-89BA350CDB92@microsoft.com...

> Jim,
> Do you have a safe place to store the plaintext string?
> Arne.
>
> "Jim Brandley" wrote:
>

>> We used the MD5 hash (from a fixed plaintext string) to regenrate the key
>> when needed.
>>
>> "Arne" <Arne@discussions.microsoft.com> wrote in message
>> news:460682D6-8BA3-4163-8AC6-DABCB452FE3B@microsoft.com...

>> > I need to create a sql column with Encrypted Credit Card. Fortunately
>> > .Net
>> > has a crypto API.
>> > Where would be a good place to store the key?
>> > Supposedly windows has a crypto store somewhere.

>>
>>
>>

[Jim Brandley]

It's just a sting constant in the code.

"Arne" <Arne@discussions.microsoft.com> wrote in message
news:7B562C1E-E837-406C-AF3C-89BA350CDB92@microsoft.com...

> Jim,
> Do you have a safe place to store the plaintext string?
> Arne.
>
> "Jim Brandley" wrote:
>

> > We used the MD5 hash (from a fixed plaintext string) to regenrate the

key

> > when needed.
> >
> > "Arne" <Arne@discussions.microsoft.com> wrote in message
> > news:460682D6-8BA3-4163-8AC6-DABCB452FE3B@microsoft.com...

> > > I need to create a sql column with Encrypted Credit Card. Fortunately

..Net

> > > has a crypto API.
> > > Where would be a good place to store the key?
> > > Supposedly windows has a crypto store somewhere.

> >
> >
> >

[Arne]

A hash is a one way encryption and it will not do any good for me.
A hash would be useful for passwords only.
Arne.

"Daniel Fisher(lennybacon)" wrote:

> I don't wanna buy stuff in a store that stores such sensitive data. Use a
> hash or leave it. Please.
>
> --
> Daniel Fisher(lennybacon)
> MCP ASP.NET C#
> Blog: [url]http://www.lennybacon.com/[/url]
>
>
> "Arne" <Arne@discussions.microsoft.com> wrote in message
> news:7B562C1E-E837-406C-AF3C-89BA350CDB92@microsoft.com...

> > Jim,
> > Do you have a safe place to store the plaintext string?
> > Arne.
> >
> > "Jim Brandley" wrote:
> >

> >> We used the MD5 hash (from a fixed plaintext string) to regenrate the key
> >> when needed.
> >>
> >> "Arne" <Arne@discussions.microsoft.com> wrote in message
> >> news:460682D6-8BA3-4163-8AC6-DABCB452FE3B@microsoft.com...
> >> > I need to create a sql column with Encrypted Credit Card. Fortunately
> >> > .Net
> >> > has a crypto API.
> >> > Where would be a good place to store the key?
> >> > Supposedly windows has a crypto store somewhere.
> >>
> >>
> >>

>
>
>

[Fred Herring]

I need to compress data, encrypt it, send it someplace, decrypt it and then
decompress it for display. I have a question about the format of encrypted
data. I plan to use block encryption therefore an intersection vector will
be used. I must also plan on padding being applied to my final block. From
a logic standpoint, after I decrypt a message do I have to strip the
intersection vector (16 bytes) off the front of the data and any padding that
may have been necessary off the back of the data before I try to decompress
my data. So I guess my question is when I invoke the decrypt method and
assign the results to a variable, do that variable now include the origional
data, the intersetion vector at the front plus padding bytes at the end of
the data.

Fred