Re: Database Encryption


Adam Tauno Williams wrote:

In our case the application uses the user's credentials to acquire a/the
key from a key repository, and then connects to the database with the
user's credentials and uses the acquired key to get or update data in
the database. The key never leaves the processes memory (and the
process forgets it after using it) or the VLAN between the application
host, the database server, and the key server.

I guess I mis-stated what I really wanted to know. I was more
questioning a key management system. Sounds like you have an external
key management system because Informix does not provide that
functionality.

Did you develop your own key management system or did you buy one (if I
may ask)?

--
Chris

.

Relevant Pages

  • Re: SQL Server 2000 Hardware Recommendations?
    ... Are you using stored procedures or adhoc sql calls? ... > and database server as we expand our web site to have more dynamic ... Currently the database server houses all data pertinent to ...
    (microsoft.public.sqlserver.server)
  • Re: Is file is being used
    ... The file system doesn't know anything about the content of the .mdb file. ... That said, most database do support multiple users, and they do so by ... Note that even in the case of a database server supporting multiple ...
    (microsoft.public.dotnet.languages.csharp)
  • SQL Server 2000 Hardware Recommendations?
    ... and database server as we expand our web site to have more dynamic ... Currently the database server houses all data pertinent to ... under a heavy load, a sql-heavy page can take as long as 90 seconds to ...
    (microsoft.public.sqlserver.server)
  • IIS/SQL Server Hardware Recommendations?
    ... and database server as we expand our web site to have more dynamic ... Currently the database server houses all data pertinent to ... under a heavy load, a sql-heavy page can take as long as 90 seconds to ...
    (microsoft.public.inetserver.iis)
  • Re: Secure Web-Based Administration
    ... > The best option would be to set up sudo to allow this webserver ... somewhat nicer and imho nuch more secure. ... These very same credentials (password + ... passphrase) are then used to store the changed data in a database. ...
    (Focus-Linux)