Sorry, if you had been paying attention, you would have noticed that the key 
comes from a database parameter block parameter.  Really, understand first, 
then shoot.

I outlined the code.  Maybe two, three hours.  Possibly a whole day if it 
involves selecting an open source AES function.  I described the interception.  
A single pointer test for zero to handle the non-encrypted case, a little more 
plus the encryption/decryption otherwise.

The reason it is less is that it doesn't require any DDL (or making some 
critical system tables user writeable).

My fundamental point wasn't this solution, though I think it has merit.  It was 
that the rush to implementation excluded the possibility of better solutions.  
I gave one as a starting point.  Surely there are some creative brains who can 
come up with others...


> On Sep 1, 2014, at 10:47 AM, Geoff Worboys <ge...@telesiscomputing.com.au> 
> wrote:
> 
> Jim Starkey wrote:
>> How can you make an assessment without taking the time to
>> understand it?
> 
> I understand enough to know that all of the options mean
> intercepting reads and/or writes to the source field.
> 
> Any form of obscuring encryption you want to add to the
> read/write of that field is obviously in addition to that
> interception (along with key management etc.) - hence my
> assumption that it will take more code.
> 
> If you can explain to me how it can take less code to do
> encryption, decryption and key management, than to write
> null to the source field the I am willing be educated.
> 
> -- 
> Geoff Worboys
> Telesis Computing Pty Ltd
> 
> 
> ------------------------------------------------------------------------------
> Slashdot TV.  
> Video for Nerds.  Stuff that matters.
> http://tv.slashdot.org/
> Firebird-Devel mailing list, web interface at 
> https://lists.sourceforge.net/lists/listinfo/firebird-devel

------------------------------------------------------------------------------
Slashdot TV.  
Video for Nerds.  Stuff that matters.
http://tv.slashdot.org/
Firebird-Devel mailing list, web interface at 
https://lists.sourceforge.net/lists/listinfo/firebird-devel

Reply via email to