Encrypt the data using Sybase SQL ??

[anigkrishnan]

Hi

Does Sybase provides any system procedures to encrypt user passwords or Credit card numbers ?

I need to store user passwords and Credit Card numbers in a a Sybase database in an encrypted form. I should be able decrypt this when I retrieve it. Whats the best way to do this ? Is there any algorithms written in sql is available ?

The passwords and credit card numbers are updated in the database via web(java). But I need to retrive this info from a shell script / sql stored proc. So a stored proc to encrypt the data might be more useful for me.

Appreciate your valuable assistance..

 

[JMCraig]

I'm guessing that it would be difficult to implement a stored procedure in T-SQL that would provide adequate security for this kind of data, but then, I've done some things in T-SQL that I thought were impossible myself.

However, I think you'd find it very workable (and a bargain considering the cost of not having good security) to put the Java-in-the-database option in place and use the Java encryption capability to create an encryption and decryption function.

But, even with this more flexible programming, I doubt that you'd find that an auditor would pass on your security as being adequate (I certainly wouldn't want my credit card stored on a DB that contained both the encrypted data and the decryption function too).

How about using Java in conjunction with your scripts to retrieve the data? That seems like it would allow you to separate the data and the manipulation functions and still give you what you need with minimal effort on the retrieval side?

Best of luck,

John
J M Craig
Alpha-G Consulting, LLC

http://alphagconsulting.bizhosting.com

nsjmcraig@netscape.net