Re: Search feature in an encrypted database

From: Artboy717 (Artboy717[NoSpam)
Date: 10/03/04

  • Next message: Shabam: "Preventing javascript injection" 
    Date: Sun, 3 Oct 2004 20:32:12 +0300

    Thanks for your answer Daniel but isn't there a more efficient way? I will
    have to load 15000 rows... Except that, all data will be unencrypted in
    memory...

    Ο "Daniel Fisher(lennybacon)" <info@(removethis)lennybacon.com> έγραψε στο
    μήνυμα news:ujXfNxWqEHA.1644@tk2msftngp13.phx.gbl...
    > 1. Load the Data to a DataSet.
    > 2. Modify the nText column (Decrypt it).
    > 3. Use the DataSet's DefaultView.RowFilter or DataTable.Select() to seach
    > your data.
    >
    >
    >
    > --
    > Daniel Fisher(lennybacon)
    > MCP C# ASP.NET
    > Blog: http://www.lennybacon.com/
    >
    >
    >
    >
    > "Artboy717" <Artboy717[NoSpam]@hotmail.com> wrote in message
    > news:Ofv4TyVqEHA.1644@tk2msftngp13.phx.gbl...
    >> Hello
    >>
    >>
    >>
    >> I develop an application in VB.NET which uses an SQL database. In its
    >> simplest
    >>
    >> form my program has to show to authenticated users some sort of
    >> information (mainly text)
    >>
    >> and to let them perform search to the stored data.
    >>
    >>
    >>
    >> The implementation I came up is the following:
    >>
    >> I use Triple DES encryption to encrypt the text, I encode it to a
    >> base64 string and
    >>
    >> store it in an ntext column. When a user has the credentials to see
    >> the data, I get the
    >>
    >> bytes from the stored string, decrypt them and show them the
    >> requested data.
    >>
    >>
    >>
    >> I admit that this model works very well for my needs and it wasn't
    >> hard to implement
    >>
    >> but lately I faced a concrete wall. and that's the search feature. How am
    >> I supposed to
    >>
    >> execute queries like "SELECT * FROM table WHERE column LIKE '%DOG%'" to
    >> the database?
    >>
    >> When I need to validate a user I encrypt his typed username and password
    >> and I try to find
    >>
    >> a matching sting in the database but in a search where the criteria are
    >> just small portions of the
    >>
    >> full text how can I find a match in the encrypted text? I tried
    >> encrypting the criteria but the result
    >>
    >> string is not the same as the stored. I don't think that I'm the first
    >> who comes up with this obstacle
    >>
    >> and there's must be a work around or something I haven't figured out.
    >> Thanks in advance.
    >>
    >>
    >
    >

  • Next message: Shabam: "Preventing javascript injection"

    Relevant Pages

    • Re: How to decrypt a string?
      ... strongly-typed to encrypt and decrypt string data. ... It starts off as a string, but encryption will turn it into arbitrary ... and then expecting it to still load. ...
      (microsoft.public.dotnet.framework)
    • Re: How to decrypt a string?
      ... strongly-typed to encrypt and decrypt string data. ... It starts off as a string, but encryption will turn it into arbitrary ... binary data. ... and then expecting it to still load. ...
      (microsoft.public.dotnet.framework)
    • RE: 2007 User Level Security
      ... encrypted string. ... the way I use it is to encrypt user names and passwords and store the ... Dim prp As Property ... Dim dbs As Object, prp As Variant ...
      (microsoft.public.access.modulesdaovba)
    • Re: Workable encryption in Tcl??
      ... The longest string would be about the length ... How to encrypt a string ... nothing about binary formats. ... ># Perform ECB mode encryption on a plaintext block of BINARY data. ...
      (comp.lang.tcl)
    • RE: Using Win32 CryptDecrypt to Decrypt RijndaelManaged
      ... I figured out how to use RijndaelManaged with AES in the C++ app. ... C++ crypto WILL successfully decrypt the .NET generated ... I am trying to write a Win32 app that can decrypt that string using the ... I can get both to encrypt and decrypt successfully in their own projects, ...
      (microsoft.public.platformsdk.security)