Re: PHP/MYSQL/ Encrypting Sensetive information
| From: | Philip Thompson | Date: | Fri, 17 Apr 2009 18:31:21 +0000 |
| Subject: | Re: PHP/MYSQL/ Encrypting Sensetive information | ||
| References: | 1 2 3 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-291653@lists.php.net to get a copy of this message | ||
On Apr 17, 2009, at 10:17 AM, Stefan Langwald wrote:
MySQLs own Function AES_(EN|DE)CRYPT is pretty cool for this case. -- Stefan LangwaldWe use MySQL's AES_(EN|DE)CRYPT. It's fast, easy to use and uses 128 bit encryption (optionally 256). http://dev.mysql.com/doc/refman/5.1/en/encryption-functions.html ~Philip
2009/4/17 דניאל דנון <danondaniel@gmail.com>:If its by a user-basis, something that can be a bit risky but possible - You can encrypt it, password is hashed on database, and the key to the other data is the un-encrypted password.. On Fri, Apr 17, 2009 at 5:00 PM, Russell Jones <rjonesx@gmail.com> wrote:We are looking at a project where we will potentially need to store sensetive information in a few fields of a MySQL table. Any recommendations on where to look for best practices in doing this? for encrypting the data, etc.? We will need to be able to decrypt the data as well, although this can probably be done locally, so hashing alone is not really an option. Russell Jones-- Use ROT26 for best security