Swader

121 reputation

bio	website	bitfalls.com
	location	Croatia
	age	27
visits	member for	1 year, 5 months
	seen	Jan 11 at 12:26
stats	profile views	2

Web developer, Chrome developer. More info at website.

	121 reputation	bio	website	bitfalls.com	visits	member for	1 year, 5 months
16 badges		location	Croatia		seen	Jan 11 at 12:26

summary answers questions tags badges favorites bounties reputation activity

20 Actions

suggestions reviews revisions comments badges posts accepts all

Dec 16	awarded	Notable Question
Jun 4	awarded	Popular Question
Dec 12	comment	Mysql - two-way encryption of sensitive data (email addresses) outside of Apache, PHP and MySQL Any recommendations on security algos decent and fast enough for our problem?
Dec 12	comment	Mysql - two-way encryption of sensitive data (email addresses) outside of Apache, PHP and MySQL hm. Since we have a cluster server setup in the US, and we're in Europe, and our cluster is managed remotely by a server admin from yet another country, this sort of setup makes it doubly complex. Add to the issue the fact that we now have a sysop level guy in our IT team who has SOME rebooting privileges (just for when something goes horribly awry and the original server admin isn't available instantly for some reason), the whole infrastructure seems to be working against us... FMI, though, how would one implement something like your solution above? The file that is never decoded to disk?
Dec 12	awarded	Commentator
Dec 12	comment	Mysql - two-way encryption of sensitive data (email addresses) outside of Apache, PHP and MySQL You're right. Definitely need to check this out.
Dec 11	comment	Mysql - two-way encryption of sensitive data (email addresses) outside of Apache, PHP and MySQL Right, that's not too shabby, yeah. I'll see what I can do in regards to that - since we access the DB extremely often to retrieve the emails, we might run into some literal speedbumps if we relied on PHP calling, parsing and using the file contents as a decryption key. Then again... if PHP would have to call an external script anyway, there might not be much difference. I'll definitely take a look at this, thanks.
Dec 11	comment	Mysql - two-way encryption of sensitive data (email addresses) outside of Apache, PHP and MySQL I know, but it does equal "more secure than non-compiled", does it not?
Dec 10	comment	Mysql - two-way encryption of sensitive data (email addresses) outside of Apache, PHP and MySQL This looks rather promising, I'll take a look as soon as I find a couple minutes of free time and post back with opinions and thoughts. Thanks!
Dec 10	comment	Mysql - two-way encryption of sensitive data (email addresses) outside of Apache, PHP and MySQL That's what I'm looking for, yes. Updated the OP slightly.
Dec 10	revised	Mysql - two-way encryption of sensitive data (email addresses) outside of Apache, PHP and MySQL Additional info
Dec 9	awarded	Supporter
Dec 8	awarded	Student
Dec 8	awarded	Editor
Dec 8	revised	Mysql - two-way encryption of sensitive data (email addresses) outside of Apache, PHP and MySQL added 719 characters in body
Dec 8	comment	Mysql - two-way encryption of sensitive data (email addresses) outside of Apache, PHP and MySQL No, that won't work. Our emails list is frequently accessed (couple thousand times per minute on average) and updated, and our servers are in the USA while we're based in Europe, there's no fear of physical thievery. What we want is the ability to drag every email requested through a separate encryption/decryption algorithm. More details in the OP
Dec 8	awarded	Autobiographer
Dec 8	asked	Mysql - two-way encryption of sensitive data (email addresses) outside of Apache, PHP and MySQL
Dec 7	comment	Mysql - two-way encryption of sensitive data (email addresses) outside of Apache, PHP and MySQL Sorry, I meant to write we store "email addresses", not "emails". Thanks for the heads up about the other sites. Should I wait for a moderator to move the question, or should I just re-post there?
Dec 7	comment	Mysql - two-way encryption of sensitive data (email addresses) outside of Apache, PHP and MySQL Oh, sorry, I meant we store email addresses, not emails. I'll update the main question. We would like the addresses to remain secure, the contact info of our users. We don't store actual emails in the database, only the contact information.