Hi Andreas,

there are several algorithms for encrypting data.  3des, aes are the most
common symmetric ones. If you use encryption to secure your data then there
is no usable linear correlation between the source and destination. In
other words ORDER BY and SORT BY will deliver completely different results.
If you maintain information that hints SQL on how to sort and/or order you
would compromise the strength of the encryption. With enough of these hints
one could launch a crypto attack - it’s like leaving a backdoor wide open.

cheers  alex




                                                                                       
                                                         
                      "Andreas Sander"                                                 
                                                         
                      <[EMAIL PROTECTED]>               An:      
[EMAIL PROTECTED]                                                 
                      Gesendet von:                     Kopie:                         
                                                         
                      sapdb.general-admin@lists         Thema:   how to encrypt highly 
sensitive data?                                          
                      erv.sap.com                                                      
                                                         
                                                                                       
                                                         
                                                                                       
                                                         
                      11.12.2002 09:50                                                 
                                                         
                                                                                       
                                                         
                                                                                       
                                                         



Hello,

i have to store highly sensitive Data in a database. It must not be
possible
to read this data for example with a file monitor. Unfortunately the the
data ist in clear text in der LOG and DAT files of the SAPDB.
Is there a way to encrypt this data without loosing the SQL features like
sorting?

Thanks in advance for any hint.

Andreas





_______________________________________________
sapdb.general mailing list
[EMAIL PROTECTED]
http://listserv.sap.com/mailman/listinfo/sapdb.general

_______________________________________________
sapdb.general mailing list
[EMAIL PROTECTED]
http://listserv.sap.com/mailman/listinfo/sapdb.general

Reply via email to