Forum Replies Created

Viewing 15 posts - 16 through 30 (of 43 total)

  • RE: Storing encypted SSN's

    Hashing is that I decided with, it made most sense. Thanks guys for all your input.

  • RE: Storing encypted SSN's

    Eric M Russell (4/28/2016)


    Steve Jones - SSC Editor (4/27/2016)


    splitting hairs.

    Losing the salt would be the equivalent of losing the symmetric key, if the domain is known. In the case of...

  • RE: Storing encypted SSN's

    Sergiy (4/27/2016)


    ram302 (4/26/2016)


    I will never need to decrypt the SSN, but I will need to add/remove ones as personnel are hired/terminated. Also, the table itself may contain multiple entries for...

  • RE: Storing encypted SSN's

    Eric M Russell (4/27/2016)


    GilaMonster (4/27/2016)


    Eric M Russell (4/27/2016)


    at this point you might as well use symmetric key encryption instead of hashing.

    I disagree. If you're using symmetric encryption and the...

  • RE: Storing encypted SSN's

    To be clear, and sorry if I'm not getting it right, I'll be hashing (with salt) these ssn values for my ssn column and these will be my lookup values...

  • RE: Storing encypted SSN's

    Ok,

    - I'll need to do a lookup using the UID (SSN), but I plan to substitute this for a hash value using some hash algorithm (SHA-1?).

    - The table will NOT...

  • RE: Storing encypted SSN's

    Jeff,

    Thanks for the feel-good praise :-D. Regarding your point on adding a salt and rainbow, where can I begin to read up on this?

  • RE: Storing encypted SSN's

    Steve,

    What I'll be doing is importing data to a newly built database. The searches are absolutely necessary as the web application will be querying for data using the key. I'll...

  • RE: Storing encypted SSN's

    I will never need to decrypt the SSN, but I will need to add/remove ones as personnel are hired/terminated. Also, the table itself may contain multiple entries for one particular...

  • RE: Storing encypted SSN's

    Yeah, I'm sold on 2016 now. I found the RC3 download: https://www.microsoft.com/en-us/evalcenter/evaluate-sql-server-2016. So I'll start testing this.

    Thanks guys. As always, very helpful 🙂

  • RE: Storing encypted SSN's

    GilaMonster, so this would call for the use of Deterministic encryption, but also assuming as Jeff.Mason points out, that I'll be using SQL Server 2016.

    Jeff.Mason, I think I'll be using...

  • RE: Storing encypted SSN's

    I also came across this article: http://dotnetslackers.com/articles/sql/IntroductionToSQLServerEncryptionAndSymmetricKeyEncryptionTutorial.aspx .

    Does this mean that I should use the encrypted key value as a lookup in the table? I will need something for...

  • RE: PHP and MSSQL

    Thanks for the lead. I tried the solution on Microsoft's website, but still no dice. This seems to be an issue isolated to CodeIgniter, the MVC I planned on using,...

  • RE: PHP and MSSQL

    Thanks!

    One more thing, I hope, I'd like to see what the 'CHAR SET' is for my database. How can I do this? I'm seeing an error that reads:

    Unable to set...

  • RE: PHP and MSSQL

    Ok,

    I created a login under the server properties > security. Added this user in TESTDB > Security.

    For this user, I should only grant it access to Connect and Select,...

Viewing 15 posts - 16 through 30 (of 43 total)