And this would offer no protection if someone got on your system since the controller did the decryption for everyone with access to the OS
-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of rob@xxxxxxxxx
Sent: Wednesday, June 13, 2012 3:36 PM
To: Midrange Systems Technical Discussion
Subject: Re: database encryption
http://publib.boulder.ibm.com/infocenter/iseries/v7r1m0/topic/rzaly/rzalyencrypt.htm
new in 7.1
I guess that's useful if you are afraid the commies are going to get your disk drives and be able to decrypt them. I'd have to know, however, how they're decrypted. For example, is the decryption key stored in sector
249 of load source? Is it stored in the IOA? Does a save decrypt it when moving to media? (and then you have to look at tape encryption.)
Field level decryption is different. That's done at the column level (duh). But it's quite easy to say "All our data is encrypted." and yet have a view over that table that decrypts it. Probably meets some audit and yet allows your users to still easily query the data.
Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1 Group Dekko Dept 1600 Mail to: 2505 Dekko Drive
Garrett, IN 46738
Ship to: Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com
From: Mike Cunningham <mike.cunningham@xxxxxxx>
To: "'midrange-l@xxxxxxxxxxxx'" <midrange-l@xxxxxxxxxxxx>,
Date: 06/13/2012 03:21 PM
Subject: database encryption
Sent by: midrange-l-bounces@xxxxxxxxxxxx
I have seen some recent conversations and vendor marketing that would say
something like "... our database is encrypted using AES 256...". To me
that implies that their entire database is encrypted. I know individual
columns/fields can be encrypted but I have never come across a database
where everything was encrypted. It's possible that someone would choose to
encrypt every column in every table. Is there something available that
would encrypt an entire database in one magical wave of an IT wizards
wand?
Mike Cunningham
midrange.com
