MySql and Encryption

MySql and Encryption

Postby vilian » Mon Sep 09, 2024 1:44 pm

Hi Guys,

In my country, we have a LGPD(General Protection data Law) that is demanding us to encrypt data. When we were using ADSSERVER, we used to work with encryption just doing AdsEnableEncryption("PSW") in the main program. Is there any way to do the same with MySql ? Is it possible ?
Sds,
Vilian F. Arraes
vilian@vfatec.com.br
Belém-Pa-Brazil
User avatar
vilian
 
Posts: 978
Joined: Wed Nov 09, 2005 2:17 am
Location: Brazil

Re: MySql and Encryption

Postby nageswaragunupudi » Tue Sep 10, 2024 4:26 am

Regards

G. N. Rao.
Hyderabad, India
User avatar
nageswaragunupudi
 
Posts: 10646
Joined: Sun Nov 19, 2006 5:22 am
Location: India

Re: MySql and Encryption

Postby nageswaragunupudi » Tue Sep 10, 2024 4:26 am

We will work on it.
Regards

G. N. Rao.
Hyderabad, India
User avatar
nageswaragunupudi
 
Posts: 10646
Joined: Sun Nov 19, 2006 5:22 am
Location: India

Re: MySql and Encryption

Postby vilian » Tue Sep 10, 2024 1:05 pm

Thank you Mr Rao,

If you need some help to try it, just let me know ;)
Sds,
Vilian F. Arraes
vilian@vfatec.com.br
Belém-Pa-Brazil
User avatar
vilian
 
Posts: 978
Joined: Wed Nov 09, 2005 2:17 am
Location: Brazil

Re: MySql and Encryption

Postby vilian » Wed Oct 16, 2024 11:55 am

Dear Mr Rao,

Could we use MySQL Enterprise Transparent Data Encryption (TDE) (https://www.mysql.com/products/enterprise/tde.html) with FWH ?
Sds,
Vilian F. Arraes
vilian@vfatec.com.br
Belém-Pa-Brazil
User avatar
vilian
 
Posts: 978
Joined: Wed Nov 09, 2005 2:17 am
Location: Brazil

Re: MySql and Encryption

Postby Otto » Wed Oct 16, 2024 12:22 pm

Hello friends,

For my DBF files, I'm testing an approach like this.

I initially wanted to use AES (fwrite()), but then I wouldn't have full-text search capabilities, and I think FTS wouldn't work even with TDE.

This type of encryption I use now isn't entirely secure, but since only we use this system, I think it's sufficiently secure.
If you use symmetric encryption based on a specific method, such as ASCII conversion followed by encryption with a code, you could transform the search term in the same way.

Here are the steps you should consider:
Preparation of the search term: Convert the search term into the same format you used for the data in the DBF file (e.g., ASCII conversion).
Application of the encryption: Apply the same encryption algorithm to the transformed search term. This will give you an encrypted search term.
Searching in the encrypted data: Then, search for the encrypted search term in the DBF files.

It’s important to note that this method only works if you apply the exact same transformation to both the stored data and the search terms.
Additionally, complex search operations (like substring searches) may be difficult since you can only look for exact matches.

Furthermore, this method could be vulnerable to attacks if the encryption algorithm or code becomes known.

Best regards,
Otto
********************************************************************
mod harbour - Vamos a la conquista de la Web
modharbour.org
https://www.facebook.com/groups/modharbour.club
********************************************************************
User avatar
Otto
 
Posts: 6335
Joined: Fri Oct 07, 2005 7:07 pm

Re: MySql and Encryption

Postby vilian » Wed Oct 16, 2024 12:28 pm

Hi Otto,
Thanks for your comment. When I used DBF/ADS files, I used to work with ADS encryption and it works very well.
But now, i need to do tis with MySql.
Sds,
Vilian F. Arraes
vilian@vfatec.com.br
Belém-Pa-Brazil
User avatar
vilian
 
Posts: 978
Joined: Wed Nov 09, 2005 2:17 am
Location: Brazil


Return to FiveWin for Harbour/xHarbour

Who is online

Users browsing this forum: Antonio Linares, Google [Bot] and 25 guests