OK... so, just to verify what we're looking for here (again 8^>): The data is submitted to CF Server in clear text, CF encrypts the data and inserts it into the DB. At some later point, an external app queries the DB, decrypts the data, and writes it to a flat file. Is that right?
The solution, IMO, is to use an encryption algorithm that is available to both CF and this external app. Again, not being a practiced COM guy, I'm not going to get into COM (since I like to sound halfway intelligent when I write). But you could try finding another external app that allows encryption decryption from the command-line. CF could use CFEXECUTE to call this app to encrypt the data and the other application could call it for decryption. Or, find an algorithm that is supported via a CF_tag and has a "sibling" that can be called from your other app. You'd just have to make sure that both CF and the other app are using the same encryption/decryption keys. For example: Blowfish http://devex.macromedia.com/developer/gallery/info.cfm?ID=CA347367-2830-11D4 -AA9700508B94F380&method=Full Rijndael or 3DES http://devex.macromedia.com/developer/gallery/info.cfm?ID=67CBD343-A003-11D5 -83F600508B94F85A&method=Full You're on your own for finding the non-CF versions though 8^). Good luck. -- Mosh Teitelbaum evoch, LLC Tel: (301) 625-9191 Fax: (301) 933-3651 Email: [EMAIL PROTECTED] WWW: http://www.evoch.com/ > -----Original Message----- > From: S. Isaac Dealey [mailto:[EMAIL PROTECTED]] > Sent: Friday, September 20, 2002 9:07 PM > To: CF-Talk > Subject: RE: encryption - CF & SQL Server > > > > So here's the catch now if I understand correctly... > > > You want to encrypt the data BEFORE it's passed in the > > form... That's > > funky... Thing is, you need a client solution then. CF > > can't do much about > > encrypting data BEFORE a form is submitted. Neither can > > ASP or PHP or JSP > > or whatever. The data is submitted by a client > > unencrypted within the form. > > Did I screw that description up? ... No, want to encrypt it before it goes > to the sql server... but then the sql server has to decrypt it later ... > > > You can use some javascript encryption techniques, but > > those are moot > > because the algorithm is readily available. It's > > important to keep a cipher > > away from prying eyes. > > > So to encrypt something BEFORE it's submitted is likely > > not possible. Not > > unless you use > > Well, we could theoretically have built the forms in Flash and > done it that > way ... but that's not the direction the project is headed... > > Isaac > Certified Advanced ColdFusion 5 Developer > > www.turnkey.to > 954-776-0046 > > ______________________________________________________________________ Your ad could be here. Monies from ads go to support these lists and provide more resources for the community. http://www.fusionauthority.com/ads.cfm FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Archives: http://www.mail-archive.com/[email protected]/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
