Mailing-List: contact user-help@cayenne.apache.org; run by ezmlm
Precedence: bulk
Reply-To: user@cayenne.apache.org
Received-SPF: pass (nike.apache.org: local policy)
Content-Class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Subject: RE: Encrypted Fields
Date: Fri, 6 Feb 2009 09:46:10 -0500
Message-ID: 
 <B5EB902A18810E43800F26A02DB4279A2EE53BE0@CNJEXCHANGE.composers.caxton.com>
In-Reply-To: <5adb61290902060635p1e01908dnd008f44eebef0ddf@mail.gmail.com>
Thread-Topic: Encrypted Fields
thread-index: AcmIaD71YwHqzv30T1SGBL6OKkpY6QAATc6g
References: <303D3774-6AA8-4776-895E-7AD58959E7DC@earthlink.net>
 <7E4F0E1A-6100-45E8-8BA6-828E710D9ACB@ish.com.au>
 <DFC4A4A6-8130-43E0-923E-167F9B3E75DA@earthlink.net>
 <5adb61290902060635p1e01908dnd008f44eebef0ddf@mail.gmail.com>
Importance: normal
Priority: normal
From: "Ramachandran Rajashri" <rramachandran@caxton.com>
To: <user@cayenne.apache.org>

Hi Michael,
I would be very interested in reading you paper. How do I get access to
it?

Thanks
Raji

-----Original Message-----
From: Michael Gentry [mailto:mgentry@masslight.net]=20
Sent: Friday, February 06, 2009 9:36 AM
To: user@cayenne.apache.org
Subject: Re: Encrypted Fields

Joe, something I've explored doing (wrote a little paper on it, but
never
implemented it) was to have a pair of values for sensitive fields.  One
is
the encrypted value (socialSecurityNumber) and the other is a version
(socialSecurityNumberVersion).  The version field maps to different keys
used to encrypt the main field.  This allows for the keys to be changed
(due
to an employee leaving or perhaps you have a 3 month mandate for key
changes) while still allowing you to read the old values.  The key file
should be kept on the disk and protected by Unix file permissions so
others
can't read it easily.
I'm not sure if I made sense, but I've you'd like, I can dig up my
little
paper to send you (it might be more helpful).  Just tell me the formats
you
can read (right now it is a Google Doc).

mrg


On Thu, Feb 5, 2009 at 11:01 PM, Joe Baldwin
<jfbaldwin@earthlink.net>wrote:

> These are all good points.  I can do it either way as far as the
business
> rules go. I was just looking for some suggestions as to best
practices.
>  The downside to using the database-managed encryption, is that it
makes the
> Cayenne code pretty messy (unless of course that I have missed some
> Utility/Convenience method that deals with applying MySQL functions to
> fetched data).
>
> I can brute-force this, as I mentioned earlier, by making the
conversions
> via Cayenne select queries and the #result directives pattern.  My
> implementation turned out to be kind of messy and so I was thinking
there
> has to be a better way.
>
=20
=20
=20
=20

This message may contain information that is confidential or privileged. =
=20
If you are not the intended recipient, please advise the sender =
immediately
and delete this message.