On Mar 13, 2014, at 3:13 PM, Mike Kienenberger <[email protected]> wrote:

> We found that trying to encrypt individual fields wasn't as helpful
> since the length and variety of individual columns tended not to be
> all that unique.
> Padding with random characters can help, but encrypting more fields
> together in a single column seemed more appropriate in our case,
> especially since you can't do any meaningful sql on the encrypted data
> anyway.

Thanks for sharing!

I agree. While the encryption mechanism can be made more or less transparent 
from the ORM perspective, there are certainly design ramifications. I am also 
looking at combining together a bunch of values in a single BLOB/CLOB column.

Andrus

Reply via email to