Re: [SQL] [PHP] Secure DB Systems - How to

2004-07-16 Thread Sarah Tanembaum
Thanks Bruno. I see the potential challenge. If the field value is encrypted, how can search be done for certain value? Do I have to seach for the encrypted value? If so, what password or key should I use? Thanks "Bruno Wolff III" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] > On

Re: [SQL] [PHP] Secure DB Systems - How to

2004-07-13 Thread Daniel Struck
> If you decrypt the data on the database, the sysadmin can see it. Hm, you are right. If one does decrypt the data on the database you have to sent the password to postgresql and so a administrator of the database could easily grasb the password. So the only way to go, would be to perform en/d

Re: [SQL] [PHP] Secure DB Systems - How to

2004-07-13 Thread Bruno Wolff III
On Tue, Jul 13, 2004 at 11:35:57 +0200, Daniel Struck <[EMAIL PROTECTED]> wrote: > > Keeping the system administrator from seeing the data while making it > > searchable is difficult. To do this you need to encrypt the data on > > the client side using a key the client has (and this key has to be

Re: [SQL] [PHP] Secure DB Systems - How to

2004-07-13 Thread Daniel Struck
> Keeping the system administrator from seeing the data while making it > searchable is difficult. To do this you need to encrypt the data on > the client side using a key the client has (and this key has to be > protected from loss) and the only searches you can do are equality > searches using a

Re: [SQL] [PHP] Secure DB Systems - How to

2004-07-09 Thread Bruno Wolff III
On Thu, Jul 08, 2004 at 11:49:36 -0400, Sarah Tanembaum <[EMAIL PROTECTED]> wrote: > I was wondering if it is possible to create a secure database system > usingPostgreSQL/PHP combination? > > I have the following in mind: > > I wanted to store all my( and my brothers and sisters) important doc