Encrypting Data

[Tim]

Hi,

I need to encrypt sensative data in a SQL db like ssn, driver license... I
was looking at using
SymmetricAlgorithm using DES to encrypt and decrypt the data. Since I need
to decrypt the data I cannot use hash like I do for login. Any thoughts?

Thanks

[Andy]

Well, my first thought is that DES is easily cracked and shouldn't be
used. Use TripleDES instead. For even more security, AES might be the
best choice.

You'll have to guard the key very carefully no matter which algorithm
you choose.

Andy

Tim wrote:

Hi,

I need to encrypt sensative data in a SQL db like ssn, driver license... I
was looking at using
SymmetricAlgorithm using DES to encrypt and decrypt the data. Since I need
to decrypt the data I cannot use hash like I do for login. Any thoughts?

Thanks

[rossum]

On Tue, 5 Dec 2006 10:01:39 -0700, "Tim" <ti*@asp.netwrote:

>Hi,

I need to encrypt sensative data in a SQL db like ssn, driver license... I
was looking at using
SymmetricAlgorithm using DES to encrypt and decrypt the data. Since I need
to decrypt the data I cannot use hash like I do for login. Any thoughts?

Thanks

1 Many SQL databases have encryption already built in, that will
probably be easier to use than anything you can develop. Check the
documentation for your database. You may get more specific advice on
a newsgroup devoted to your database.

2 DES is obsolete, do not use it unless you have a need to be
compatible with a legacy system.

3 The current standard encryption algorithm of choice is AES. Use
that unless you have a specific reason not to.

4 You will be able to get more expert advice on encryption in general
at sci.crypt. I should warn you that some of the advice can be a bit
fierce.

rossum