Derek Developer
<[EMAIL PROTECTED]> wrote:
> appologies, "master database" should read "MASTER TABLE"
> This is where the index is stored I assume?

An index is an index. It's not stored in any table, "MASTER" or 
otherwise.

> You suggested that each record would NOT be decrypted for a SELECT
> because the INDEX would handle that work.

Index doesn't "handle" any work. It's just a data structure. The 
database engine does the work. It might use an index to speed up 
execution of certain statements. Yes, in many cases, the engine can 
avoid reading every record in the table, by using an index to narrow the 
search down to the relevant records.

> Since the INDEX is
> proabably not a MAC hash of the SS# then it would be accessible from
> the MASTER TABLE yes?

I'm not sure what this "MASTER TABLE" you speak of is, or how an index 
would be accessible from it.

> If that is the case then clearly an Index is not a viable solution
> and each page will have to be decrypted to perform and equlity/range
> search.

Since I'm not entirely clear of the set of premises you refer to as 
"that", I'm not sure whether they happen to be the case or not. But 
since I know the conclusion you arrived at is false, I can only assume 
that one or more of those premises are incorrect, and/or the logical 
deduction from the premises to the conclusion is flawed.

>> Unlike the situation here, you can't encrypt individual columns
>
> I have several ASm implementations of AES and secure HASH Algos that
> are very very fast. I can apply these to individual columns for each
> row.

Sure, you can build a homebrewn solution. It is then up to you to keep 
it secure, of course. I can't help but notice that you have conveniently 
omitted the second half of my statement above.

> Before I implement this, I wanted to make sure I understand the
> implementation at the page level. Obviously a single Row can take up
> more than one page, but I am still not clear if a single page can
> ever contain more than one Row?

Yes it can.

Igor Tandetnik



_______________________________________________
sqlite-users mailing list
sqlite-users@sqlite.org
http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users

Reply via email to