Re: SSN encryption

tomstdenis_at_gmail.com
Date: 09/29/05


Date: 29 Sep 2005 05:42:30 -0700


drfremove@nber.org wrote:
> We want to encrypt social security numbers in a database. The special
> requirement is that the same SSN should encrypt to the same value
> regardless of context. That way when new records are added to the
> database it will be possible to easily match them to existing records.
> Also, the tables can be sorted or selected and still matched to other
> tables in the database.

Use ... a ... salt [and not a known fixed key]!!!

SSNs are like what 10 digits? that's a 33-bit number... fill the
remainder of the bits with random data and encrypt, voila 128-bit
"token" which when decoded gets you a SSN.

Tom



Relevant Pages

  • Re: SSN encryption
    ... >> We want to encrypt social security numbers in a database. ... address and SSN are always excluded. ... exposed if there were a breakdown in the other security precautions. ...
    (sci.crypt)
  • Re: SSN encryption
    ... >>We want to encrypt social security numbers in a database. ... >>requirement is that the same SSN should encrypt to the ... To avoid collisions you also have to store the encrypted ...
    (sci.crypt)
  • Re: SSN encryption
    ... >> We want to encrypt social security numbers in a database. ... >> database it will be possible to easily match them to existing records. ... we add 85 random bits and then encrypt, won't the same SSN ... feenberg isat nber dotte org ...
    (sci.crypt)
  • SSN encryption
    ... We want to encrypt social security numbers in a database. ... tell, the solutions are of the form "Map each SSN to a sequence number, ...
    (sci.crypt)
  • Re: Database encryption.
    ... > I am writing application that encrypt paradox type database with IDEA ... which is used to mark end of string. ...
    (sci.crypt)