Re: [PHP] Encryption/Decryption Question

2010-08-12 Thread Peter Lind
On 12 August 2010 02:07, Josh Kehn josh.k...@gmail.com wrote: On Aug 11, 2010, at 6:50 PM, tedd wrote: Hi gang: Okay, a question to the Encryption/Decryption gurus out there. If you were given: 1. This encrypted string: p3IVhDBT26i+p4vd7J4fAw== 2. Were told it was a social security

Re: [PHP] Encryption/Decryption Question

2010-08-12 Thread Adam Richardson
On Wed, Aug 11, 2010 at 6:50 PM, tedd t...@sperling.com wrote: Hi gang: Okay, a question to the Encryption/Decryption gurus out there. If you were given: 1. This encrypted string: p3IVhDBT26i+p4vd7J4fAw== 2. Were told it was a social security number (i.e., in the form of 123-45-6789).

Re: [PHP] Encryption/Decryption Question

2010-08-12 Thread Peter Lind
On 12 August 2010 09:48, Adam Richardson simples...@gmail.com wrote: On Wed, Aug 11, 2010 at 6:50 PM, tedd t...@sperling.com wrote: *snip*   1. MD5 - Use of this old algorithm to produce your keys limits your key   space due to collisions AND the fact that 3DES accepts keys longer than the  

RE: [PHP] Storing Social Security Number WAS: Encryption/Decryption Question

2010-08-12 Thread tedd
At 5:30 PM -0700 8/11/10, Daevid Vincent wrote: -Original Message- 2. Were told it was a social security number (i.e., in the form of 123-45-6789). Stop. Why are you even contemplating storing SS# ?? Daevid et al: Why? Because my client wants to store SS numbers on their

RE: [PHP] Storing Social Security Number WAS: Encryption/Decryption Question

2010-08-12 Thread Ashley Sheridan
On Thu, 2010-08-12 at 09:45 -0400, tedd wrote: At 5:30 PM -0700 8/11/10, Daevid Vincent wrote: -Original Message- 2. Were told it was a social security number (i.e., in the form of 123-45-6789). Stop. Why are you even contemplating storing SS# ?? Daevid et al:

Re: [PHP] Storing Social Security Number WAS: Encryption/Decryption Question

2010-08-12 Thread Richard Quadling
On 12 August 2010 14:45, tedd t...@sperling.com wrote: At 5:30 PM -0700 8/11/10, Daevid Vincent wrote:   -Original Message-  2. Were told it was a social security number    (i.e., in the form of 123-45-6789). Stop. Why are you even contemplating storing SS# ?? Why hold the SSN

Re: [PHP] Encryption/Decryption Question

2010-08-12 Thread tedd
At 8:09 PM -0400 8/11/10, Bastien Koert wrote: From my experience, I'd have to say that it would be a real tough go to crack that. If there was a weak point in the scheme is that your end result pattern ( the ssn ) is defined with a pair of constants, the hyphens. In our scheme we remove the

Re: [PHP] Encryption/Decryption Question

2010-08-12 Thread tedd
At 3:48 AM -0400 8/12/10, Adam Richardson wrote: -- snip excellent points -- Of note, SS#'s are a special piece of data, not only because of their power, but because of their lifetime (normally as long as the individual lives.) This is very different from a credit card which gets updated every

Re: [PHP] Storing Social Security Number WAS: Encryption/Decryption Question

2010-08-12 Thread tedd
At 2:59 PM +0100 8/12/10, Richard Quadling wrote: On 12 August 2010 14:45, tedd t...@sperling.com wrote: At 5:30 PM -0700 8/11/10, Daevid Vincent wrote: -Original Message- 2. Were told it was a social security number (i.e., in the form of 123-45-6789). Stop. Why are

RE: [PHP] Encryption/Decryption Question

2010-08-12 Thread Bob McConnell
From: tedd At 8:09 PM -0400 8/11/10, Bastien Koert wrote: From my experience, I'd have to say that it would be a real tough go to crack that. If there was a weak point in the scheme is that your end result pattern ( the ssn ) is defined with a pair of constants, the hyphens. In our scheme we

RE: [PHP] Storing Social Security Number WAS: Encryption/Decryption Question

2010-08-12 Thread tedd
At 2:51 PM +0100 8/12/10, Ashley Sheridan wrote: If you are storing the data in a DB, then I'd consider using different levels of access to that via different DB users, which should offer an extra layer of security in protecting the data. Of course, the routines I'm writing provide several

[PHP] imagettftext Angle Problem

2010-08-12 Thread Floyd Resler
I'm trying to draw text at a 90 degree angle, reading from bottom to top. For some reason, all of the letters are aligning to the top (i.e. the left side) of the text. It looks really odd! Has anyone else experienced this before? Thanks! Floyd -- PHP General Mailing List

Re: [PHP] imagettftext Angle Problem

2010-08-12 Thread Ashley Sheridan
On Thu, 2010-08-12 at 10:40 -0400, Floyd Resler wrote: I'm trying to draw text at a 90 degree angle, reading from bottom to top. For some reason, all of the letters are aligning to the top (i.e. the left side) of the text. It looks really odd! Has anyone else experienced this before?

Re: [PHP] imagettftext Angle Problem

2010-08-12 Thread Floyd Resler
On Aug 12, 2010, at 10:42 AM, Ashley Sheridan wrote: On Thu, 2010-08-12 at 10:40 -0400, Floyd Resler wrote: I'm trying to draw text at a 90 degree angle, reading from bottom to top. For some reason, all of the letters are aligning to the top (i.e. the left side) of the text. It looks

Re: [PHP] Storing Social Security Number WAS: Encryption/Decryption Question

2010-08-12 Thread Bastien Koert
On Thu, Aug 12, 2010 at 10:30 AM, tedd t...@sperling.com wrote: At 2:51 PM +0100 8/12/10, Ashley Sheridan wrote: If you are storing the data in a DB, then I'd consider using different levels of access to that via different DB users, which should offer an extra layer of security in protecting

Re: [PHP] Encryption/Decryption Question

2010-08-12 Thread Bastien Koert
On Thu, Aug 12, 2010 at 10:00 AM, tedd t...@sperling.com wrote: At 8:09 PM -0400 8/11/10, Bastien Koert wrote: From my experience, I'd have to say that it would be a real tough go to crack that. If there was a weak point in the scheme is that your end result pattern ( the ssn ) is defined

Re: [PHP] Storing Social Security Number WAS: Encryption/Decryption Question

2010-08-12 Thread tedd
At 10:56 AM -0400 8/12/10, Bastien Koert wrote: However, the data must be stored in an encrypted format and it must be transmitted via SSL. We do it that way (taking both a hash for searching for the ssn and the encrypted form) and haven't had any issues as yet. The data will be encrypted and

Re: [PHP] Storing Social Security Number WAS: Encryption/Decryption Question

2010-08-12 Thread Joshua Kehn
On Aug 12, 2010, at 11:32 AM, tedd wrote: At 10:56 AM -0400 8/12/10, Bastien Koert wrote: However, the data must be stored in an encrypted format and it must be transmitted via SSL. We do it that way (taking both a hash for searching for the ssn and the encrypted form) and haven't had any

Re: [PHP] imagettftext Angle Problem

2010-08-12 Thread tedd
On Thu, 2010-08-12 at 10:40 -0400, Floyd Resler wrote: I'm trying to draw text at a 90 degree angle, reading from bottom to top. For some reason, all of the letters are aligning to the top (i.e. the left side) of the text. It looks really odd! Has anyone else experienced this before?

Re: [PHP] Storing Social Security Number WAS: Encryption/Decryption Question

2010-08-12 Thread tedd
At 11:39 AM -0400 8/12/10, Joshua Kehn wrote: Would one option be to have a table of unencrypted SSN's with an encrypted id for the user. So you could search the SSN's and then connect them, however if the table was dumped you wouldn't be able to link it directly to the person (as it would

Re: [PHP] Storing Social Security Number WAS: Encryption/Decryption Question

2010-08-12 Thread Joshua Kehn
On Aug 12, 2010, at 11:55 AM, tedd wrote: At 11:39 AM -0400 8/12/10, Joshua Kehn wrote: Would one option be to have a table of unencrypted SSN's with an encrypted id for the user. So you could search the SSN's and then connect them, however if the table was dumped you wouldn't be able to

Re: [PHP] imagettftext Angle Problem

2010-08-12 Thread Floyd Resler
On Aug 12, 2010, at 11:50 AM, tedd wrote: On Thu, 2010-08-12 at 10:40 -0400, Floyd Resler wrote: I'm trying to draw text at a 90 degree angle, reading from bottom to top. For some reason, all of the letters are aligning to the top (i.e. the left side) of the text. It looks really odd!

Re: [PHP] imagettftext Angle Problem

2010-08-12 Thread Ashley Sheridan
On Thu, 2010-08-12 at 12:14 -0400, Floyd Resler wrote: On Aug 12, 2010, at 11:50 AM, tedd wrote: On Thu, 2010-08-12 at 10:40 -0400, Floyd Resler wrote: I'm trying to draw text at a 90 degree angle, reading from bottom to top. For some reason, all of the letters are aligning to the

Re: [PHP] imagettftext Angle Problem

2010-08-12 Thread Floyd Resler
On Aug 12, 2010, at 12:17 PM, Ashley Sheridan wrote: On Thu, 2010-08-12 at 12:14 -0400, Floyd Resler wrote: On Aug 12, 2010, at 11:50 AM, tedd wrote: On Thu, 2010-08-12 at 10:40 -0400, Floyd Resler wrote: I'm trying to draw text at a 90 degree angle, reading from bottom to top. For

Re: [PHP] Storing Social Security Number WAS: Encryption/Decryption Question

2010-08-12 Thread Bastien Koert
On Thu, Aug 12, 2010 at 11:32 AM, tedd t...@sperling.com wrote: At 10:56 AM -0400 8/12/10, Bastien Koert wrote: However, the data must be stored in an encrypted format and it must be transmitted via SSL. We do it that way (taking both a hash for searching for the ssn and the encrypted form)

Re: [PHP] imagettftext Angle Problem

2010-08-12 Thread tedd
Well, whatever the problem is it is definitely related only to my system. I tried your code and had the same results (https://adexfulfillment.com/adex/tests/test.php). I tried different fonts as well. The fonts I'm using were exported from FontBook on my Mac. I wonder if that might have

RE: [PHP] Storing Social Security Number WAS: Encryption/Decryption Question

2010-08-12 Thread Tommy Pham
-Original Message- From: tedd [mailto:t...@sperling.com] Sent: Thursday, August 12, 2010 7:30 AM To: a...@ashleysheridan.co.uk Cc: php-general@lists.php.net Subject: RE: [PHP] Storing Social Security Number WAS: Encryption/Decryption Question At 2:51 PM +0100 8/12/10, Ashley

RE: [PHP] Storing Social Security Number WAS: Encryption/Decryption Question

2010-08-12 Thread Daevid Vincent
-Original Message- From: tedd [mailto:t...@sperling.com] Sent: Thursday, August 12, 2010 8:32 AM To: Bastien Koert Cc: php-general@lists.php.net Subject: Re: [PHP] Storing Social Security Number WAS: Encryption/Decryption Question For searching standard fields, it's a piece

Re: [PHP] Storing Social Security Number WAS: Encryption/Decryption Question

2010-08-12 Thread Hans Åhlin
I have an idea. First create a master key that the ssn ar encrypted with. Store the master key encrypted with a key accessible by users (mksk). Every user stores the key (mksk) to decrypt the (master key) and the mksk should be ecrypted with there password as key. And when a new user is created