126 reputation
16
bio website bitfalls.com
location Croatia
age 29
visits member for 2 years, 10 months
seen Sep 23 at 8:17

Web developer, Chrome developer. More info at website.


Dec
12
comment Mysql - two-way encryption of sensitive data (email addresses) outside of Apache, PHP and MySQL
Any recommendations on security algos decent and fast enough for our problem?
Dec
12
comment Mysql - two-way encryption of sensitive data (email addresses) outside of Apache, PHP and MySQL
hm. Since we have a cluster server setup in the US, and we're in Europe, and our cluster is managed remotely by a server admin from yet another country, this sort of setup makes it doubly complex. Add to the issue the fact that we now have a sysop level guy in our IT team who has SOME rebooting privileges (just for when something goes horribly awry and the original server admin isn't available instantly for some reason), the whole infrastructure seems to be working against us... FMI, though, how would one implement something like your solution above? The file that is never decoded to disk?
Dec
12
comment Mysql - two-way encryption of sensitive data (email addresses) outside of Apache, PHP and MySQL
You're right. Definitely need to check this out.
Dec
11
comment Mysql - two-way encryption of sensitive data (email addresses) outside of Apache, PHP and MySQL
Right, that's not too shabby, yeah. I'll see what I can do in regards to that - since we access the DB extremely often to retrieve the emails, we might run into some literal speedbumps if we relied on PHP calling, parsing and using the file contents as a decryption key. Then again... if PHP would have to call an external script anyway, there might not be much difference. I'll definitely take a look at this, thanks.
Dec
11
comment Mysql - two-way encryption of sensitive data (email addresses) outside of Apache, PHP and MySQL
I know, but it does equal "more secure than non-compiled", does it not?
Dec
10
comment Mysql - two-way encryption of sensitive data (email addresses) outside of Apache, PHP and MySQL
This looks rather promising, I'll take a look as soon as I find a couple minutes of free time and post back with opinions and thoughts. Thanks!
Dec
10
comment Mysql - two-way encryption of sensitive data (email addresses) outside of Apache, PHP and MySQL
That's what I'm looking for, yes. Updated the OP slightly.
Dec
8
comment Mysql - two-way encryption of sensitive data (email addresses) outside of Apache, PHP and MySQL
No, that won't work. Our emails list is frequently accessed (couple thousand times per minute on average) and updated, and our servers are in the USA while we're based in Europe, there's no fear of physical thievery. What we want is the ability to drag every email requested through a separate encryption/decryption algorithm. More details in the OP
Dec
7
comment Mysql - two-way encryption of sensitive data (email addresses) outside of Apache, PHP and MySQL
Sorry, I meant to write we store "email addresses", not "emails". Thanks for the heads up about the other sites. Should I wait for a moderator to move the question, or should I just re-post there?
Dec
7
comment Mysql - two-way encryption of sensitive data (email addresses) outside of Apache, PHP and MySQL
Oh, sorry, I meant we store email addresses, not emails. I'll update the main question. We would like the addresses to remain secure, the contact info of our users. We don't store actual emails in the database, only the contact information.