So, maybe I am missing something here and you can educate me on what is happening in ns_encrypt. If I were thinking of a simple symmetric key based solution, then how would ns_encrypt help me? Maybe a scenario will explain
1) I need to be able to encrypt some data and store it somewhere, may or may not be a DB. 2) I want to use symmetric key because it would be faster to do so. 3) Then later on in the process, the same key could be used to decrypt the data. I tried ns_encrypt for this and it works great(I used the defaults while calling ns_encrypt and ns_decrypt), but I am not sure what it is doing exactly and can it work w/o a pub-pvt keypair - is it encrypting the plaintext using a generated symmetric key and that is being reencrypted again? Thanks for responding. -Ani -----Original Message----- From: AOLserver Discussion [mailto:[EMAIL PROTECTED] On Behalf Of Daniel P. Stasinski Sent: Tuesday, March 06, 2007 1:46 PM To: [email protected] Subject: Re: [AOLSERVER] Question on a solution using AOL, openSSL On 3/6/07, Ani Deglurkar <[EMAIL PROTECTED]> wrote: > was thinking of using the openSSL crypto libs for this. I have seen the > ns_encrypt from Stasinski, but that seems more like securing the session > key over a transport solution. You're very incorrect in assuming that. ns_encrypt is for encrypting data to be stored within a database. It has nothing to do with sessions or keys. Daniel -- | --------------------------------------------------------------- | Daniel P. Stasinski | http://www.saidsimple.com | [EMAIL PROTECTED] | http://www.disabilities-r-us.com | Google Talk: mooooooo | http://www.scriptkitties.com | Jabber: [EMAIL PROTECTED] | http://www.avenues.org -- AOLserver - http://www.aolserver.com/ To Remove yourself from this list, simply send an email to <[EMAIL PROTECTED]> with the body of "SIGNOFF AOLSERVER" in the email message. You can leave the Subject: field of your email blank. -- AOLserver - http://www.aolserver.com/ To Remove yourself from this list, simply send an email to <[EMAIL PROTECTED]> with the body of "SIGNOFF AOLSERVER" in the email message. You can leave the Subject: field of your email blank.
