Re: Encrypting data Was: Securing tape backup drive

Yes, now that you have looked into the future and answered 1/2 of my
next question, that would have been on the RPG-L, with sample code. The
other half will be, how do you handle the password so that it isn't
handed to the morons along with the tape? Put it in the source, compile,
blank it in the source...

Roger

On 3/19/2007 12:32 PM, rob@xxxxxxxxx wrote:

You mean like:
  

CREATE TABLE ROB/VICKER 
    

   (MYKEY INT AS IDENTITY, 
    MYSSN CHAR(32) for bit data not null
  PRIMARY KEY (MYKEY)) 
  Table VICKER created in ROB. 
// Notice the size on MYSSN? 
// Length of data + 16 bytes for encryption + 5 bytes to next 8 byte 
boundary.
  

set encryption password = 'Ben123' 
INSERT INTO ROB/VICKER (MYSSN) 
    

  VALUES(ENCRYPT_TDES('289-46-8832')) 
  1 rows inserted in VICKER in ROB. 
  

select * from rob/vicker 
    

  SELECT statement run complete. 
....+....1....+....2....+....3....+....4....+...
        MYKEY   MYSSN 
            1      Ÿ  Nµ¾/Ø&?Ú| ðygÝ=üäŸ S í L¤I
********  End of data  ******** 
  

select mykey, decrypt_char(myssn) as DisplaySSN
    

  from rob/vicker 
....+....1....+....2....+....3
        MYKEY   DISPLAYSSN 
            1   289-46-8832 
********  End of data  *******


http://publib.boulder.ibm.com/infocenter/iseries/v5r4/topic/db2/rbafzmstscale.htm#scaencrypt
http://publib.boulder.ibm.com/infocenter/iseries/v5r4/topic/db2/rbafzmstscale.htm#scaencrypttdes
http://publib.boulder.ibm.com/infocenter/iseries/v5r4/topic/db2/rbafzmstscale.htm#scadecrypt

Rob Berendt