Re: R: Encrypting contents of fields

Good idea, Michael, but where do I start?

I have already made a very simple COBOL/HEX-encryption that will work, but it 
could be interesting to have a look at this as well...

Mvh.

Geir.

-----Original Message-----
From: cobol400-l-bounces@xxxxxxxxxxxx
[mailto:cobol400-l-bounces@xxxxxxxxxxxx]On Behalf Of Michael Rosinger
Sent: Thursday, November 09, 2006 9:22 PM
To: cobol400-l@xxxxxxxxxxxx
Subject: Re: [COBOL400-L] R: Encrypting contents of fields


"Jon Paris" <Jon.Paris@xxxxxxxxxxxxxx> wrote in message 
news:mailman.543.1162937374.8229.cobol400-l@xxxxxxxxxxxxxxx

I suppose the starting point is to use some algorithm written in Cobol.

Particularly if Sarbanes Oxley is involved, I would stay away from any 
"home
grown" solution.  It will take forever to convince the auditors of the
validity and safety of the approach.

There are many encryption APIs available on System i (V5R2 onwards) all of
which are usable from ILE COBOL.  I would strongly recommend either using
them or buying a pre-certified vendor solution.

I agree with Jon's comments, but before attempting to use COBOL or 
purchasing an OEM product, you should check out the functionality that DB2 
UDB/iSeries already provides. Starting with v5r3, there are a nice set of 
encryption-related scalar functions. DB2 UDB is built in to the iSeries. Why 
not leverage it?