4 ms·
CBC mode yes. Thanks, I fixed it now. Small range of unique values is good argument. But wouldn't hash field (used for lookup) expose the same information? Is
by zigzag312 3y ago
CBC mode yes. Thanks, I fixed it now.
Small range of unique values is good argument. But wouldn't hash field (used for lookup) expose the same information?
Is there any good online resource focused on field encryption techniques in databases?
- hangonhn 3y ago> But wouldn't hash field (used for lookup) expose the same information? Yes absolutely which is why you pick a small substring as the input to the hash function. For example, for the SSN field, you can use the first 2 digits as the input. Even if you get a digest match, the fields themselves may not actually be the exact same value. SSN, however, given its small range is kind of hard to secure. You might be able to do something like the email address plus SSN as the input into the digest function. I don't have any online resources specific to this topic but I did find this book to be very accessible for someone like me who's an engineer: https://www.amazon.com/gp/product/1593278268/ref=ppx_yo_dt_b_search_asin_title?ie=UTF8&psc=1 https://www.amazon.com/gp/product/1593278268/ref=ppx_yo_dt_b...
- zigzag312 3y agoThanks, I'll take a look at it. I find encrypting data in DB challenging, as you often still need to run queries on that data in a performant way.