MySQL Encryption-at-rest capability

2018-11-14 Thread Venkata Nagothi
Hi MySQL Community, Greetings ! I have a query regarding encryption-at-rest feature in MySQL Community Edition - What i understand is that Encryption-at-rest is supported from MySQL-5.7.11 community edition and only on file-per-table basis which means encryption at table-level can

Re: file level encryption on mysql

2013-03-14 Thread spameden
(or part of it) to get the info from these 3 tables. The password itself for the user should be stored as a hash in database (use bcrypt). All decryption / encryption should be done in your application. The only disadvantage is you won't be able to read user's data if you don't know user's password

Re: file level encryption on mysql

2013-02-05 Thread Mike Franon
to store 3 tables that have email address, ip address, and personal info. On Sun, Feb 3, 2013 at 12:57 PM, Reindl Harald h.rei...@thelounge.net wrote: Am 03.02.2013 18:52, schrieb Mike Franon: Hi, I was wondering what type of encryption for linux would you recommend to encrypt the database

Re: file level encryption on mysql

2013-02-05 Thread Reindl Harald
that have email address, ip address, and personal info. On Sun, Feb 3, 2013 at 12:57 PM, Reindl Harald h.rei...@thelounge.net wrote: Am 03.02.2013 18:52, schrieb Mike Franon: Hi, I was wondering what type of encryption for linux would you recommend to encrypt the database files on the OS level

Re: file level encryption on mysql

2013-02-05 Thread Mike Franon
Which is the best way ? I see you can do it from PHP itself http://coding.smashingmagazine.com/2012/05/20/replicating-mysql-aes-encryption-methods-with-php/ or can use mysql AES? http://security.stackexchange.com/questions/16473/how-do-i-protect-user-data-at-rest From what I understand we

RE: file level encryption on mysql

2013-02-05 Thread Rick James
AES encryption is weak because it is too easy for the hacker to get the passphrase. If you can somehow hide the passphrase behind 'root', you can at least prevent a non-sudo user from seeing the data. Your web server starts as root, then degrades itself before taking requests. If it can grab

Re: file level encryption on mysql

2013-02-03 Thread Reindl Harald
Am 03.02.2013 18:52, schrieb Mike Franon: Hi, I was wondering what type of encryption for linux would you recommend to encrypt the database files on the OS level? I had a hard time starting the database after I moved it to a partiton with encryptFS I only need 3 tables encrypted

Re: Encryption with MYSQL

2010-09-20 Thread Tompkins Neil
need to encrypt a string like 'hello world', using a passkey. But I also need to be able to decrypt the encrypted phrase using the same passkey. I noticed in MySQL there are functions like AES_ENCRYPT() http://dev.mysql.com/doc/refman/5.1/en/encryption-functions.html#function_aes-encrypt

Re: Encryption with MYSQL

2010-09-20 Thread Baron Schwartz
://dev.mysql.com/doc/refman/5.1/en/encryption-functions.html#function_sha1 -- MySQL General Mailing List For list archives: http://lists.mysql.com/mysql To unsubscribe:http://lists.mysql.com/mysql?unsub=arch...@jab.org

Encryption with MYSQL

2010-09-17 Thread Tompkins Neil
Hi, I need to encrypt a string like 'hello world', using a passkey. But I also need to be able to decrypt the encrypted phrase using the same passkey. I noticed in MySQL there are functions like AES_ENCRYPT()http://dev.mysql.com/doc/refman/5.1/en/encryption-functions.html#function_aes-encrypt

Re: Encryption with MYSQL

2010-09-17 Thread Johan De Meersman
phrase using the same passkey. I noticed in MySQL there are functions like AES_ENCRYPT() http://dev.mysql.com/doc/refman/5.1/en/encryption-functions.html#function_aes-encrypt However, I need the encrypted phrase to be returned as a string, since it will be passed to a URL as a parameter. Does

RE: MySQL Encryption

2010-03-21 Thread John Daisley
Mike, Encrypted filesystems can seriously impact performance of MySQL. Its an entirely different issue to MySQL encryption but one would hope that, if you are going to go to all the trouble of using two part keys and the strongest encryption available in your database, you would also take

RE: MySQL Encryption

2010-03-21 Thread mos
At 03:21 PM 3/21/2010, John Daisley wrote: Mike, Encrypted filesystems can seriously impact performance of MySQL. Its an entirely different issue to MySQL encryption but one would hope that, if you are going to go to all the trouble of using two part keys and the strongest encryption

Re: MySQL Encryption

2010-03-21 Thread John Daisley
On Sun, Mar 21, 2010 at 9:49 PM, mos mo...@fastmail.fm wrote: At 03:21 PM 3/21/2010, John Daisley wrote: Mike, Encrypted filesystems can seriously impact performance of MySQL. Its an entirely different issue to MySQL encryption but one would hope that, if you are going to go to all

Re: MySQL Encryption

2010-03-20 Thread Tompkins Neil
Hi What sort of information are you looking to encrypt ? If it is for user passwords I'd recommend SHA256 which is one way encryption. Or are you looking to encrypt more sensitive information like card holder data ? Regards Neil On Fri, Mar 19, 2010 at 4:22 PM, Jim j...@lowcarbfriends.com

Re: MySQL Encryption

2010-03-20 Thread Jim
recommend SHA256 which is one way encryption. Or are you looking to encrypt more sensitive information like card holder data ? Regards Neil On Fri, Mar 19, 2010 at 4:22 PM, Jim j...@lowcarbfriends.com mailto:j...@lowcarbfriends.com wrote: Thanks for the reply, John. What you are describing

RE: MySQL Encryption

2010-03-20 Thread John Daisley
- From: Jim j...@lowcarbfriends.com Sent: Friday, March 19, 2010 4:22 PM To: John Daisley daisleyj...@googlemail.com; mysql@lists.mysql.com Subject: Re: MySQL Encryption Thanks for the reply, John. What you are describing seems to be the approach I've seen on the few places I've seen

RE: MySQL Encryption

2010-03-20 Thread mos
Encryption Thanks for the reply, John. What you are describing seems to be the approach I've seen on the few places I've seen this topic discussed. I've been considering something along those lines, essentially a two part key. Part one of the key is made from some data that is in the record I want

Re: MySQL Encryption

2010-03-19 Thread John Daisley
Jim, I tend to derive a key based on a separate character string and the contents of the data in the same or a related table. This means each row has a unique encryption key and you never have to have the whole key stored somewhere (you don't even know it :p ). Biggest advantage to this is should

Re: MySQL Encryption

2010-03-19 Thread Jim
access. Thanks, Jim On 3/19/2010 6:39 AM, John Daisley wrote: Jim, I tend to derive a key based on a separate character string and the contents of the data in the same or a related table. This means each row has a unique encryption key and you never have to have the whole key stored somewhere

MySQL Encryption

2010-03-18 Thread Jim
In terms of encryption functions AES_DECRYPT and AES_ENCRYPT, can anyone point to any good links or offer any suggestions in terms of best practices on storage of the associated symmetric key? I've found very little information on this when searching. Does MySQL offer any asymmetric

Re: MySQL Encryption - Third-party tools

2009-08-25 Thread philip
On Mon, 24 Aug 2009, Mike Scully wrote: Hello, all. =20 Can any of you share with me the names of any third-party tools or appliances that you are using to encrypt your MySQL databases? I am doing a search and would like to narrow down the initial search list. Thanks! =20 Mike I use

RE: MySQL Encryption - Third-party tools

2009-08-25 Thread Daevid Vincent
You might consider a full disk/volume/partition encryption maybe? http://truecrypt.com/ I use this for my private files and it's awesome. Cross platform and can do virtual partitions on an actual physical drive. -Original Message- From: philip [mailto:phi...@livenet.ac.uk] Sent

MySQL Encryption - Third-party tools

2009-08-24 Thread Mike Scully
Hello, all. Can any of you share with me the names of any third-party tools or appliances that you are using to encrypt your MySQL databases? I am doing a search and would like to narrow down the initial search list. Thanks! Mike

Re: Table encryption

2008-11-22 Thread Steve Edberg
At 2:41 PM -0800 11/21/08, Zakai Kinan wrote: I searched google and the archives of this list, but I am not cleared about the support of table encryption in mysql. Can someone clarify for me? thanks, Well, as far as I know, there isn't any built-in full table encryption implemented

Table encryption

2008-11-21 Thread Zakai Kinan
I searched google and the archives of this list, but I am not cleared about the support of table encryption in mysql. Can someone clarify for me? thanks, ZK -- MySQL General Mailing List For list archives: http://lists.mysql.com/mysql To unsubscribe:http://lists.mysql.com

Encryption with collation

2008-01-28 Thread Steven Buehler
I have a column in a table that was turned into an cp1251_general_ci for a type of encryption. Question is, how do I unencrypt it? Thanks Steve -- MySQL General Mailing List For list archives: http://lists.mysql.com/mysql To unsubscribe:http://lists.mysql.com/[EMAIL PROTECTED]

Best Practice - Encryption

2007-09-10 Thread J.R. Bullington
-rush my security guards, break past the bullet-proof door walls, and rip out my hard drives through the locked rack cabinet, I want to ensure my data is safe. Also, I want to make it so that you cannot even LOOK at the data unless you know the correct encryption keys. I currently employ AES

Encryption

2006-09-29 Thread Cummings, Shawn (GNAPs)
Is there a simple way to encrypted data as it's being stored in a table? And then easily decrypted when it's queried? Sample syntaxs if available - thanks in advance. -- MySQL General Mailing List For list archives: http://lists.mysql.com/mysql To unsubscribe:

RE: Encryption

2006-09-29 Thread Jimmy Guerrero
Hello, Have you taken a look at: http://dev.mysql.com/doc/refman/5.0/en/encryption-functions.html That might give you a good start. Thanks, Jimmy Guerrero Sr Product Manager MySQL, Inc -Original Message- From: Cummings, Shawn (GNAPs) [mailto:[EMAIL PROTECTED] Sent: Friday

Re: Encryption for mySQL 3.23

2005-10-05 Thread Jeffrey Goldberg
On Oct 4, 2005, at 4:34 PM, Jeff Pflueger wrote: Where might I find the key so that I can send it along to them? any suggestions on this? The password is what you need to send. The encryption and decryption functions generate a key from the password. Internally, the key that the AES

Re: Encryption for mySQL 3.23

2005-10-04 Thread Jeff Pflueger
will then be sent as a text file to another institution to be decrypted. I am using mySQL version 11.18 Distrib 3.23.58 for RedHat Linux. I cannot find a single encryption function in the documentation that seems to not create a syntax error for the version of mySQL I am using. I

Encryption for mySQL 3.23

2005-10-03 Thread Jeff Pflueger
Hi, I need to encrypt data as I insert it into a mySQL database. The data will then be sent as a text file to another institution to be decrypted. I am using mySQL version 11.18 Distrib 3.23.58 for RedHat Linux. I cannot find a single encryption function in the documentation that seems

Re: Encryption for mySQL 3.23

2005-10-03 Thread SGreen
find a single encryption function in the documentation that seems to not create a syntax error for the version of mySQL I am using. I am also concerned because whatever encryption I am using needs to be decrypted outside of mySQL. Any suggestions? Thanks! I don't expect a de-encryptor

encryption syntax

2005-10-03 Thread Jeff Pflueger
Anybody have an idea why I might be getting the following message: ERROR 1064 (0): You have an error in your SQL syntax near '('hello','password')' at line 1 When I type this in at the command line: SELECT AES_ENCRYPT('hello','password'); Version info: mysql Ver 14.7 Distrib 4.1.12,

Merging two tables which contain passwords with different encryption methods

2005-09-06 Thread Dave
current members table and move the data into the new forum members table. The current members tables uses the default PASSWORD encryption built into MySQL. Although my current MySQL version is 4.1.3, I believe this is the same password encryption that was used in MySQL 3.2. The user data

Re: Merging two tables which contain passwords with different encryption methods

2005-09-06 Thread Jasper Bryant-Greene
Dave wrote: [snip] The current members tables uses the default PASSWORD encryption built into MySQL. Although my current MySQL version is 4.1.3, I believe this is the same password encryption that was used in MySQL 3.2. The user data was created in an earlier version of MySQL, and later

Re: Merging two tables which contain passwords with different encryption methods

2005-09-06 Thread Dave
It did change between MySQL 3.2 and 4.1. You need the old-passwords configuration directive, it is in the MySQL manual at dev.mysql.com. Thank you. I believe the old-passwords configuration has already been set by my web host. You can't decrypt the password fields. That's the point of

Re: Merging two tables which contain passwords with different encryption methods

2005-09-06 Thread Jasper Bryant-Greene
Dave wrote: [snip] I believe I will need to use the new password hashing algorithm, because using the old one would require me to reconfigure the PHP code for the forum, which would be a level of complexity beyond my capabilities. So I now understand that I can not decrypt the passwords

Re: Merging two tables which contain passwords with different encryption methods [SOLVED]

2005-09-06 Thread Dave
the plain text password, it would have to get to that stage in order to be put through the MD5 algorithm). Okay, that makes the situation very clear. I now understand that MySQL can not manipulate encrypted passwords for the purpose of changing encryption methods. While this is not very convenient

Re: AES Encryption

2005-06-17 Thread Jigal van Hemert
From: Martin For my tests I used the blob field (not varchar or anything else), but compared to your tests, I didn't use MySQL 5.0.6 (as it's still a beta) but I used MySQL 4.1. Maybe that's part of the problem, although I'm not sure. FWIW: I tested it on 4.0.23-standard, with the same

Re: AES Encryption

2005-06-16 Thread Gleb Paharenko
*** Table: a Create Table: CREATE TABLE `a` ( `a` blob ) ENGINE=MyISAM DEFAULT CHARSET=cp1251 COLLATE=cp1251_bin I think of using AES Encryption for some time now, because

RE: AES Encryption

2005-06-16 Thread Martin
solved it by limiting the number of characters by 256 in my application, but ofcourse that's not ideal... Thanks, Martin -Oorspronkelijk bericht- Van: Gleb Paharenko [mailto:[EMAIL PROTECTED] Verzonden: woensdag 15 juni 2005 14:31 Aan: mysql@lists.mysql.com Onderwerp: Re: AES Encryption

AES Encryption

2005-06-15 Thread Martin
Hi, I think of using AES Encryption for some time now, because it seems to be the most secure encryption method in MySQL at this moment and table encryption of some sort is not possible. In the documentation I read BLOB fields are recommended for storage of data with AES_Encrypt, otherwise you

Re: AES Encryption

2005-06-15 Thread mos
At 04:32 AM 6/15/2005, you wrote: Hi, I think of using AES Encryption for some time now, because it seems to be the most secure encryption method in MySQL at this moment and table encryption of some sort is not possible. I really wish MySQL would support table wide encryption because more

Re: AES Encryption

2005-06-15 Thread Cassj
If the government passes a law to force this data to be encrypted, The last thing I want is the Government mandating encryption for anyone. If you want a law to help here, I'd rather there be a law forcing companies to disclose which encryption scheme they're using, and which customer

Re: AES Encryption

2005-06-15 Thread gerald_clark
mos wrote: At 04:32 AM 6/15/2005, you wrote: Hi, I think of using AES Encryption for some time now, because it seems to be the most secure encryption method in MySQL at this moment and table encryption of some sort is not possible. I really wish MySQL would support table wide

again on encryption function, with bug 7846 question

2005-03-22 Thread symbulos partners
Dear friends, thanks for the link to the dev manual page on encryption function. Which encryption is more secure (strongest) AES DES SHA ? I would have said AES, but after reading the manual chapters on DES, SHA I am not s(ec)ure any more. By the way, I did not understand if the bug http

RE: again on encryption function, with bug 7846 question

2005-03-22 Thread Tom Crimmins
On Tuesday, March 22, 2005 07:15, symbulos partners wrote: Dear friends, thanks for the link to the dev manual page on encryption function. Which encryption is more secure (strongest) AES DES SHA ? Are you using this for password storage or encrypting actual data? If you are using

Re: Aes Encryption

2005-02-11 Thread Bernhard Fischer
On Thursday 10 February 2005 19:00, love wrote: Has any body implemented Aes encryption while storing critical data in mysql? I want to know the logic you are implementing to store your passwords to encrypt/decrypt data. Love Kumar Love Kumar wrote: I think this question could

Re: Aes Encryption

2005-02-11 Thread Gleb Paharenko
Hello. If you mentioned an AES_ENCRYPT(), see: http://dev.mysql.com/doc/mysql/en/encryption-functions.html You specify your password in your queries. The database doesn't contains the password by itself. Your application can ask a user for a password each time, and you don't have

Re: Aes Encryption

2005-02-11 Thread love
19:00, love wrote: Has any body implemented Aes encryption while storing critical data in mysql? I want to know the logic you are implementing to store your passwords to encrypt/decrypt data. Love Kumar Love Kumar wrote: I think this question could not be answered globally. What exactly do

Re: Aes Encryption

2005-02-11 Thread Bernhard Fischer
On Friday 11 February 2005 11:52, love wrote: There is not some thing secret to be stored but the idea is to encrypt customer credit card information so it is not avilable to unauthorized users but key cannot be stored in source code as any body who can hack databases to pull out the

Re: Aes Encryption

2005-02-11 Thread Bernhard Fischer
Nevertheless you should be aware that the information is travelling unencrypted between the mysql client and server unless you're using SSL tunneling or similar techniques. Sorry, since mysql 4.0, SSL is of course possible. (I'm still using 3.23) bh pgp7GAhKO8td6.pgp Description: PGP

Re: Aes Encryption

2005-02-10 Thread love
Has any body implemented Aes encryption while storing critical data in mysql? I want to know the logic you are implementing to store your passwords to encrypt/decrypt data. Love Kumar Love Kumar wrote: Hi, Aes Encryption requires a password (key) to access data, now where do we store this key

Aes Encryption

2005-02-09 Thread love
Hi, Aes Encryption requires a password (key) to access data, now where do we store this key? with the source code ? or in seperate database ? because any body who has the access to souce code can view the critical info or even if you store passwords in another database then it is not a big

AES_BLOCK size for MySQL Encryption

2005-01-21 Thread J. Wren Hunt
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I am interested in feedback, advice from anyone who has changed the AES_BLOCK_SIZE (default 16 bytes, for 128 bit) to 32 bytes, or 256 bit encryption as mentioned on: http://dev.mysql.com/doc/mysql/en/Encryption_functions.html I am only attempting

Encryption

2004-05-21 Thread jschung
Dear Sir, What level of Encryption does MySQL have? I cannot find much security information from mysql.com. Thanks, Joseph -- MySQL General Mailing List For list archives: http://lists.mysql.com/mysql To unsubscribe:http://lists.mysql.com/[EMAIL PROTECTED]

Re: Encryption

2004-05-21 Thread Greg Willits
On May 21, 2004, at 1:54 AM, [EMAIL PROTECTED] wrote: What level of Encryption does MySQL have? I cannot find much security information from mysql.com. http://dev.mysql.com/doc/mysql/en/Encryption_functions.html -- greg willits -- MySQL General Mailing List For list archives: http

Re: Encryption

2004-05-21 Thread Victor Medina
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Greg Willits wrote: | On May 21, 2004, at 1:54 AM, [EMAIL PROTECTED] wrote: | | What level of Encryption does MySQL have? I cannot find much security | information from mysql.com. | | | http://dev.mysql.com/doc/mysql/en/Encryption_functions.html

Re: Encryption

2004-05-21 Thread Greg Willits
On May 21, 2004, at 5:19 AM, Victor Medina wrote: | On May 21, 2004, at 1:54 AM, [EMAIL PROTECTED] wrote: | | What level of Encryption does MySQL have? I cannot find much security | information from mysql.com. || | http://dev.mysql.com/doc/mysql/en/Encryption_functions.html | Any level of SSL

Re: Encryption Issue

2004-02-22 Thread Frederic Wenzel
[EMAIL PROTECTED] wrote: I would like to encrypt informaton in MySQL DB using the AES_ENCRYPT function, but what if someone looks into the log files? What ever may be logged by the mysql daemon - I can't believe it loggs passwords or the stored data itself. So why do you think so? bye Fred

Re: Encryption Issue

2004-02-22 Thread fbeltran
', 'key') Any one who looks into the log file will be able to see the query, the information and the key, and all my information would be compromised... am i wrong? Regards FBR Frederic Wenzel [EMAIL PROTECTED] 22/02/2004 05:21 a.m. To [EMAIL PROTECTED] cc Subject Re: Encryption Issue

Re: Encryption Issue

2004-02-22 Thread Matt W
Hi, - Original Message - From: [EMAIL PROTECTED] Sent: Sunday, February 22, 2004 3:18 PM Subject: Re: Encryption Issue According to documentation there is a query log wich logs established connections and executed queries, also there is the binary log wich stores all statements

Re: Encryption Issue

2004-02-22 Thread fbeltran
Hi, That's what i thought... but it makes no sense to me... it should be a way to store data safely using MySQL encryption functions... In the meantime... what are you using for encryption? FBR Matt W [EMAIL PROTECTED] 22/02/2004 08:24 p.m. To [EMAIL PROTECTED], [EMAIL PROTECTED] cc

Encryption Issue

2004-02-21 Thread fbeltran
I would like to encrypt informaton in MySQL DB using the AES_ENCRYPT function, but what if someone looks into the log files? Unfortunately, i cannot prevent access to that computer... FBR

Re: aes encryption bug

2003-11-08 Thread Matt W
encryption bug Paul, TINYBLOB does seem to hold the value properly. I can't use a TINYBLOB in a primary key. Is this not allowed? The ALTER statement complains that I am using a column without a length specified. Herb On Thu, 2003-11-06 at 19:24, Paul DuBois wrote: At 15:29 -0800 11/6/03, Herb Rubin

Re: aes encryption bug

2003-11-08 Thread Matt W
Hi William, - Original Message - From: William R. Mussatto Sent: Friday, November 07, 2003 12:49 PM Subject: Re: aes encryption bug Paul DuBois said: Okay, I investigated this further and I believe I know the cause of the problem. The solution is to use a TINYBLOB NOT NULL

Re: aes encryption bug

2003-11-08 Thread Paul DuBois
value with a specific string: INSERT INTO test SET `id` = AES_ENCRYPT('551850040', '0bf251c9aaf007deaf1143ca1492b561'); my field 'id' is VARCHAR(16) NOT NULL If I change the value or the encryption string it works. But this combination turns out to be null and it refuses to insert

Re: aes encryption bug

2003-11-08 Thread Paul DuBois
At 8:50 -0800 11/7/03, Herb Rubin wrote: Paul, TINYBLOB does seem to hold the value properly. I can't use a TINYBLOB in a primary key. Is this not allowed? The ALTER statement complains that I am using a column without a length specified. Specify a length, then. :-)

Re: aes encryption bug

2003-11-07 Thread Herb Rubin
with a specific string: INSERT INTO test SET `id` = AES_ENCRYPT('551850040', '0bf251c9aaf007deaf1143ca1492b561'); my field 'id' is VARCHAR(16) NOT NULL If I change the value or the encryption string it works. But this combination turns out to be null and it refuses to insert. With MySQL

Re: aes encryption bug

2003-11-07 Thread William R. Mussatto
string: INSERT INTO test SET `id` = AES_ENCRYPT('551850040', '0bf251c9aaf007deaf1143ca1492b561'); my field 'id' is VARCHAR(16) NOT NULL If I change the value or the encryption string it works. But this combination turns out to be null and it refuses to insert. With MySQL 4.0.14, 4.0.16

Re: aes encryption bug

2003-11-07 Thread Herb Rubin
' is VARCHAR(16) NOT NULL If I change the value or the encryption string it works. But this combination turns out to be null and it refuses to insert. With MySQL 4.0.14, 4.0.16, and 4.1.1, I get: mysql select AES_ENCRYPT('551850040', '0bf251c9aaf007deaf1143ca1492b561

aes encryption bug

2003-11-06 Thread Herb Rubin
Hi, I am trying to use aes_encrypt and I get a NULL value with a specific string: INSERT INTO test SET `id` = AES_ENCRYPT('551850040', '0bf251c9aaf007deaf1143ca1492b561'); my field 'id' is VARCHAR(16) NOT NULL If I change the value or the encryption string it works. But this combination

Re: aes encryption bug

2003-11-06 Thread Paul DuBois
At 14:03 -0800 11/6/03, Herb Rubin wrote: Hi, I am trying to use aes_encrypt and I get a NULL value with a specific string: INSERT INTO test SET `id` = AES_ENCRYPT('551850040', '0bf251c9aaf007deaf1143ca1492b561'); my field 'id' is VARCHAR(16) NOT NULL If I change the value or the encryption

Re: aes encryption bug

2003-11-06 Thread Paul DuBois
the value or the encryption string it works. But this combination turns out to be null and it refuses to insert. With MySQL 4.0.14, 4.0.16, and 4.1.1, I get: mysql select AES_ENCRYPT('551850040', '0bf251c9aaf007deaf1143ca1492b561

Re: aes encryption bug

2003-11-06 Thread Herb Rubin
At 14:03 -0800 11/6/03, Herb Rubin wrote: Hi, I am trying to use aes_encrypt and I get a NULL value with a specific string: INSERT INTO test SET `id` = AES_ENCRYPT('551850040', '0bf251c9aaf007deaf1143ca1492b561'); my field 'id' is VARCHAR(16) NOT NULL If I change the value or the encryption

Re: aes encryption bug

2003-11-06 Thread Paul DuBois
', '0bf251c9aaf007deaf1143ca1492b561'); my field 'id' is VARCHAR(16) NOT NULL If I change the value or the encryption string it works. But this combination turns out to be null and it refuses to insert. With MySQL 4.0.14, 4.0.16, and 4.1.1, I get: mysql select AES_ENCRYPT('551850040', '0bf251c9aaf007deaf1143ca1492b561

Re: ODBC Encryption?

2003-10-23 Thread Tbird67ForSale
What you've seen is what you get. None. Try tunneling through SSH. Try this link to learn more: http://www.cs.kuleuven.ac.be/system/security/ssh/tunnel.shtml -- MySQL General Mailing List For list archives: http://lists.mysql.com/mysql To unsubscribe:http://lists.mysql.com/[EMAIL

RE: ODBC Encryption?

2003-10-23 Thread Paul F
Thanks. I was thinking about using stunnel. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Thursday, October 23, 2003 3:41 PM To: [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: Re: ODBC Encryption? What you've seen is what you get. None. Try tunneling

ODBC Encryption?

2003-10-20 Thread Paul F
Greetings. Can anyone tell me what type of encryption is used when sending mysql username/password through ODBC. I see that the data and username are plaintext. Thanks! -- MySQL General Mailing List For list archives: http://lists.mysql.com/mysql To unsubscribe:http://lists.mysql.com

MySQL Logging and encryption

2003-08-07 Thread K. Wright - DataAnywhere
If logging is turned on, is there a way to disable it for a given query? IE. If I query -- select AES_ENCRYPT(This is very important data, lessthansecretkey); Then my key and the value I'm trying to encrypt is visible in the log files. KJW

Re: encryption/authentication

2003-07-17 Thread Mark Matthews
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 John Jolet wrote: I need to find out if it's possible to do two things with mysql. The first is external authentication, preferably with kerberos5, but PAM will work as well. No. Second, encrypting the data stream. Specifically with jdbc

Encryption of user / pass in odbc.ini / alternatives

2003-07-08 Thread Hubbard, Dan
All; Does anyone know of a more secure way than storing the username and password to the database connection within the odbc.ini ? We are using PHP on one server connecting to a MySQL 4.0 database ? Thanks

RE: AES 256-Bit Encryption and /etc/my.cnf

2003-06-25 Thread Lenz Grimmer
for your suggestion, which I will forward to the developer in charge of that part of the code. However, I am not sure if we can fulfil this request. Enabling 256 bit encryption by default may pose legal problems (export regulations), but IANAL. We shall see. Bye, LenZ - -- For technical

RE: AES 256-Bit Encryption and /etc/my.cnf

2003-06-25 Thread Daevid Vincent
:11 AM To: Daevid Vincent Cc: [EMAIL PROTECTED] Subject: RE: AES 256-Bit Encryption and /etc/my.cnf -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, On Tue, 24 Jun 2003, Daevid Vincent wrote: It would be really nice if ANY of these kinds of configuration options were settable

Re: AES 256-Bit Encryption

2003-06-24 Thread Lenz Grimmer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wed, 11 Jun 2003, Herb Wartens wrote: Does anyone know where to find the 256-Bit patch for AES encryption? No patch needed - just edit include/my_aes.h and change the AES_KEY_LENGTH define to the desired value (it defaults to 128 bits). Bye

RE: AES 256-Bit Encryption and /etc/my.cnf

2003-06-24 Thread Daevid Vincent
AM To: Herb Wartens Cc: [EMAIL PROTECTED] Subject: Re: AES 256-Bit Encryption -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wed, 11 Jun 2003, Herb Wartens wrote: Does anyone know where to find the 256-Bit patch for AES encryption? No patch needed - just edit include/my_aes.h

AES 256-Bit Encryption

2003-06-11 Thread Herb Wartens
Does anyone know where to find the 256-Bit patch for AES encryption? Thanks...=) -- MySQL General Mailing List For list archives: http://lists.mysql.com/mysql To unsubscribe:http://lists.mysql.com/[EMAIL PROTECTED]

encryption, access, scripting in a database

2002-12-27 Thread David T-G
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, all -- I have, with the generous help of Michael Babcock, worked out what I think is a reasonable way to protect the credit card numbers in my database from improper access. Basically, only the server (better yet, some other server) can access

Re: Mysql Encryption

2002-11-22 Thread Michael T. Babcock
(Virtual loop interface for disk subsystem). You can do the same thing but use encryption on the device so the 'real' data stored in bigfile.dat is encrypted, but /var/bigfile isn't. -- Michael T. Babcock CTO, FibreSpeed Ltd. (Hosting, Security, Consultation, Database, etc) http

RE: Mysql Encryption

2002-11-19 Thread Fraser Stuart
: Roger Baklund [mailto:[EMAIL PROTECTED]] | Sent: Tuesday, 19 November 2002 1:15 AM | To: [EMAIL PROTECTED] | Cc: Alexandre Aguiar; Fraser Stuart | Subject: Re: Mysql Encryption | | | * Alexandre Aguiar | On 14 Nov 2002 Fraser Stuart shaped the electrons to write something | about [Mysql

Re: Mysql Encryption

2002-11-19 Thread Roger Baklund
, and also from the middle layer (application server, web server or similar). The client sw should only have access to your data through a API in the application layer. The level of security, need of encryption and so on could be separated in two different domains: _within_ the system, and _between_

Re: Mysql Encryption

2002-11-18 Thread Alexandre Aguiar
On 14 Nov 2002 Fraser Stuart shaped the electrons to write something about [Mysql Encryption] We are about to embark on a project that requires data encryption - mainly to stop sensitive information being viewed accidentally (ie Isn´t it possible to tunnel MySQL connections through ssl? Under

RE: Mysql Encryption

2002-11-18 Thread Mike Hillyer
PROTECTED] Subject: Re: Mysql Encryption On 14 Nov 2002 Fraser Stuart shaped the electrons to write something about [Mysql Encryption] We are about to embark on a project that requires data encryption - mainly to stop sensitive information being viewed accidentally (ie Isn´t it possible to tunnel

Re: Mysql Encryption

2002-11-18 Thread Roger Baklund
* Alexandre Aguiar On 14 Nov 2002 Fraser Stuart shaped the electrons to write something about [Mysql Encryption] We are about to embark on a project that requires data encryption - mainly to stop sensitive information being viewed accidentally (ie Isn´t it possible to tunnel MySQL

Fw: Mysql Encryption

2002-11-18 Thread Matthew Scarrow
Solutions Inc. www.comit.ca - Original Message - From: Alexandre Aguiar [EMAIL PROTECTED] To: Fraser Stuart [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Sent: Monday, November 18, 2002 8:09 AM Subject: Re: Mysql Encryption On 14 Nov 2002 Fraser Stuart shaped the electrons to write something

RE: Mysql Encryption

2002-11-18 Thread Andy Eastham
Aguiar; Fraser Stuart Cc: [EMAIL PROTECTED] Subject: RE: Mysql Encryption A windows versionof Stunnel is available from the stunnel website (www.stunnel.org), I would reccomend using it for your needs. Mike Hillyer -Original Message- From: Alexandre Aguiar [mailto:[EMAIL PROTECTED

Re: Mysql Encryption

2002-11-18 Thread mos
At 08:15 AM 11/18/2002, you wrote: * Alexandre Aguiar On 14 Nov 2002 Fraser Stuart shaped the electrons to write something about [Mysql Encryption] We are about to embark on a project that requires data encryption - mainly to stop sensitive information being viewed accidentally (ie Isn

Re: Mysql Encryption

2002-11-18 Thread Joseph Bueno
Fraser Stuart shaped the electrons to write something about [Mysql Encryption] We are about to embark on a project that requires data encryption - mainly to stop sensitive information being viewed accidentally (ie Isn´t it possible to tunnel MySQL connections through ssl? Yes

  1   2   >