Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

I need to store encrypted information in a mysql table. I would like to use the AES algoritm but I don't know if 4096 is supported and if it is a good length to encrypt data like: credit card, email etc.

share|improve this question
1  
That depends on if you use it correctly. –  Brad Nov 22 '11 at 20:17
2  
4096 bit AES? Are you sure you're not talking about RSA? AES 256 is probably the "comparable" key size for AES and as an algorithm my understanding is that it's very secure. –  Ben Brocka Nov 22 '11 at 20:20
1  
I've heard 1,048,576 bit is pretty good. –  Blender Nov 22 '11 at 20:20
13  
The fact that you are asking this question tells me you should definitely not be in the business of storing credit card information. If you are going to store credit card information you'll need PCI compliance and that's not exactly trivial. –  Null Nov 22 '11 at 20:21
4  
You also might like to read what is the difference between 128, 192 and 256 bit AES in practical terms. –  user2213 Nov 23 '11 at 9:22
show 3 more comments

migrated from stackoverflow.com Nov 23 '11 at 13:38

This question came from our site for professional and enthusiast programmers.

1 Answer

No, 4096 bit encryption is not good enough to encrypt your data. Becase of a few reasons.

  1. AES does not support 4096 bit encryption.
  2. Even if AES supported 4096 bit encryption, it would be far to slow (most likely). When 128 bit AES is plenty secure why would you want to slow your system down for such little added value?
  3. If you actually meant RSA instead of AES, still the answer is no as 4096 bit RSA is unnecessary. 2048 bit RSA is more than sufficient. But, that said, why would you want to use public-key crypto to encrypt your database? Normally that would be a bad idea. Please post more details so we can determine the best recommendation.
share|improve this answer
    
not to mention, RSA will be really slow, as in I'll have to wait a year for it to encrypt. (for a whole database) –  ewanm89 Nov 24 '11 at 1:27
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.