Re: AES Encryption

2005-06-16 Thread Jigal van Hemert
From: "Martin" > For my tests I used the blob field (not varchar or anything else), but > compared to your tests, I didn't use MySQL 5.0.6 (as it's still a beta) but > I used MySQL 4.1. Maybe that's part of the problem, although I'm not sure. FWIW: I tested it on 4.0.23-standard, with the same re

RE: AES Encryption

2005-06-16 Thread Martin
ite strange, but so far I solved it by limiting the number of characters by 256 in my application, but ofcourse that's not ideal... Thanks, Martin -Oorspronkelijk bericht- Van: Gleb Paharenko [mailto:[EMAIL PROTECTED] Verzonden: woensdag 15 juni 2005 14:31 Aan: mysql@lists.mysql.com

Re: AES Encryption

2005-06-16 Thread Gleb Paharenko
Hello. > Also, while testing I experienced that inputting something like more > the 255 characters with AES_Encrypt, the AES_Decrypt function doesn't > give > back more then 255 characters. Is this correct, or am I doing something > wrong here? AES_ENCRYPT wo

Re: AES Encryption

2005-06-15 Thread gerald_clark
mos wrote: At 04:32 AM 6/15/2005, you wrote: Hi, I think of using AES Encryption for some time now, because it seems to be the most secure encryption method in MySQL at this moment and table encryption of some sort is not possible. I really wish MySQL would support table wide encryptio

Re: AES Encryption

2005-06-15 Thread Cassj
d which customer info is being encrypted. And even with that said, laws are only good for those who abide by them. :-) -Cassj -Original Message- From: mos <[EMAIL PROTECTED]> Sent: Jun 15, 2005 11:00 AM To: mySQL list Subject: Re: AES Encryption At 04:32 AM 6/15/2005, you wrot

Re: AES Encryption

2005-06-15 Thread mos
At 04:32 AM 6/15/2005, you wrote: Hi, I think of using AES Encryption for some time now, because it seems to be the most secure encryption method in MySQL at this moment and table encryption of some sort is not possible. I really wish MySQL would support table wide encryption because more an

Re: Aes Encryption

2005-02-11 Thread Bernhard Fischer
> > Nevertheless you should be aware that the information is travelling > unencrypted between the mysql client and server unless you're using SSL > tunneling or similar techniques. > Sorry, since mysql 4.0, SSL is of course possible. (I'm still using 3.23) bh pgp7GAhKO8td6.pgp Description: PGP

Re: Aes Encryption

2005-02-11 Thread Bernhard Fischer
On Friday 11 February 2005 11:52, love wrote: > There is not some thing secret to be stored but the idea is to encrypt > customer credit card information so it is not avilable to unauthorized > users but key cannot be stored in source code as any body who can hack > databases to pull out the inform

Re: Aes Encryption

2005-02-11 Thread love
There is not some thing secret to be stored but the idea is to encrypt customer credit card information so it is not avilable to unauthorized users but key cannot be stored in source code as any body who can hack databases to pull out the information can also hack key from source code, so make

Re: Aes Encryption

2005-02-11 Thread Gleb Paharenko
Hello. If you mentioned an AES_ENCRYPT(), see: http://dev.mysql.com/doc/mysql/en/encryption-functions.html You specify your password in your queries. The database doesn't contains the password by itself. Your application can ask a user for a password each time, and you don't have to stor

Re: Aes Encryption

2005-02-11 Thread Bernhard Fischer
On Thursday 10 February 2005 19:00, love wrote: > Has any body implemented Aes encryption while storing critical data in > mysql? I want to know the logic you are implementing to store your > passwords to encrypt/decrypt data. > > Love Kumar > > Love Kumar wrote: I think this question could not be

Re: Aes Encryption

2005-02-10 Thread love
Has any body implemented Aes encryption while storing critical data in mysql? I want to know the logic you are implementing to store your passwords to encrypt/decrypt data. Love Kumar Love Kumar wrote: Hi, Aes Encryption requires a password (key) to access data, now where do we store this key?

Re: aes encryption bug

2003-11-08 Thread Paul DuBois
At 8:50 -0800 11/7/03, Herb Rubin wrote: Paul, TINYBLOB does seem to hold the value properly. I can't use a TINYBLOB in a primary key. Is this not allowed? The ALTER statement complains that I am using a column without a length specified. Specify a length, then. :-) http://www.mysql.com/doc/en/I

Re: aes encryption bug

2003-11-08 Thread Paul DuBois
At 10:49 -0800 11/7/03, William R. Mussatto wrote: Paul DuBois said: At 15:29 -0800 11/6/03, Herb Rubin wrote: Paul, I did try VARCHAR(16) BINARY and it still failed to INSERT in a NOT NULL column. The encrypted string seems to be equivalent to the NULL value even though it visually looks like

Re: aes encryption bug

2003-11-08 Thread Matt W
Hi William, - Original Message - From: "William R. Mussatto" Sent: Friday, November 07, 2003 12:49 PM Subject: Re: aes encryption bug > Paul DuBois said: > > > > Okay, I investigated this further and I believe I know the cause of the > > problem. The so

Re: aes encryption bug

2003-11-08 Thread Matt W
Hi Herb, You should be able to specify 255 as the PRI KEY length... I think. CREATE TABLE table ( col TINYBLOB NOT NULL, PRIMARY KEY (col(255)) ); Hope that helps. Matt - Original Message - From: "Herb Rubin" Sent: Friday, November 07, 2003 10:50 AM Subjec

Re: aes encryption bug

2003-11-07 Thread Herb Rubin
Paul, Is there a limitation on having a TINYBLOB as a primary key? Herb On Thu, 2003-11-06 at 19:24, Paul DuBois wrote: > At 15:29 -0800 11/6/03, Herb Rubin wrote: > >Paul, > > > >I did try VARCHAR(16) BINARY and it still failed to INSERT in a NOT NULL > >column. > > > >The encrypted string see

Re: aes encryption bug

2003-11-07 Thread William R. Mussatto
Paul DuBois said: > At 15:29 -0800 11/6/03, Herb Rubin wrote: >>Paul, >> >>I did try VARCHAR(16) BINARY and it still failed to INSERT in a NOT >> NULL column. >> >>The encrypted string seems to be equivalent to the NULL value even >> though it visually looks like some kind of data. >> >>Herb > > Ok

Re: aes encryption bug

2003-11-07 Thread Herb Rubin
Paul, TINYBLOB does seem to hold the value properly. I can't use a TINYBLOB in a primary key. Is this not allowed? The ALTER statement complains that I am using a column without a length specified. Herb On Thu, 2003-11-06 at 19:24, Paul DuBois wrote: > At 15:29 -0800 11/6/03, Herb Rubin wrote:

Re: aes encryption bug

2003-11-06 Thread Paul DuBois
At 15:29 -0800 11/6/03, Herb Rubin wrote: Paul, I did try VARCHAR(16) BINARY and it still failed to INSERT in a NOT NULL column. The encrypted string seems to be equivalent to the NULL value even though it visually looks like some kind of data. Herb Okay, I investigated this further and I believe

Re: aes encryption bug

2003-11-06 Thread Herb Rubin
Paul, I did try VARCHAR(16) BINARY and it still failed to INSERT in a NOT NULL column. The encrypted string seems to be equivalent to the NULL value even though it visually looks like some kind of data. Herb > Please reply to the list, not to me directly, so that others can > follow this dis

Re: aes encryption bug

2003-11-06 Thread Paul DuBois
Please reply to the list, not to me directly, so that others can follow this discussion. Thanks. At 14:54 -0800 11/6/03, Herb Rubin wrote: Paul, Yes, I get the same, now try and decrypt it, it will turn out to be NULL. So, you cannot insert this into a NOT NULL column. It will reject it. Your mes

Re: aes encryption bug

2003-11-06 Thread Paul DuBois
At 14:03 -0800 11/6/03, Herb Rubin wrote: Hi, I am trying to use aes_encrypt and I get a NULL value with a specific string: INSERT INTO test SET `id` = AES_ENCRYPT('551850040', '0bf251c9aaf007deaf1143ca1492b561'); my field 'id' is VARCHAR(16) NOT NULL If I change the value or the encryption strin