Does anyone use AwareIM's Encryption?

BobK

Other than the format of the --des-key-file I could not find too much information.

The format of the key file is:
key_num des_key_str

Where each key_num value must be a number in the range from 0 to 9 and des_key_str is the string that is used to encrypt the data.

I got this to work using a des_key_string of 8 random characters. I was just wondering if there are any best practices for coming up with the key string.

Thanks

kklosson

I'm interested in this and a search in the User's Guide on "Encryption" yields nothing. I am interested in some level of encryption at rest. Basically, I would like to encrypt columns necessary to blunt concerns of PII.

I will be deploying my app using the run time package. So I'm curious if AwareIM encryption needs to be married to one particular database. I presume that the key set in the app has to match the key set in the database, but is it possible to use the same keys in different databases? I don't want (can't have) software builds with database-specific keys.

tford

Search the User Guide on the word encrypt and you will find a few references.

aware_support

We used the encryption ourselves in one of the projects that we have developed for one of our customers.

BobK

kklosson,

Did you see this:

Attribute values are encrypted with a secret key (DES encryption). MySQL manages these keys in a separate file where each key has its number. Please enter the number of the key below. Refer to the MySQL documentation for more details.

kklosson wrote:

So I'm curious if AwareIM encryption needs to be married to one particular database.

From the above, I assume encryption within AwareIM is only supported by MySQL.

kklosson wrote:

but is it possible to use the same keys in different databases?

The keys are stored (in plain text) within a file outside of MySQL. A MySQL variable needs to be set to point to this file. So, yes, the same keys can be used for different databases.

kklosson

You have given me clarity. Thank you.