Re: Field encryption for a unique key field

Mike,

If you're using FIELDPROC support, I don't think you need to do anything.
The DB does it transparently behind the scenes.

One tidbit this article,
http://www.ibmsystemsmag.com/power/Systems-Management/Security/townsend_fieldproc/?page=3

CHAIN/SETLL will work as expected, but READ doesn't return in the order
expected (as the index is encrypted)

If you want to use the masking support, be sure to understand the options
for FIELDPROC_ENCODED_COMPARISON value in QAQQINI.
http://www.mcpressonline.com/rpg/db2-field-procedures-finally-support-conditional-masking.html

Charles


On Wed, Dec 14, 2016 at 11:25 AM, Mike Cunningham <mike.cunningham@xxxxxxx>
wrote:

We have a field we need to encrypt but we have multiple RPG applicants
that do a CHAIN and some SQL that do a SELECT WHERE on the field as a
unique key. We need to let users find a record using this key field as we
get lots of government data with this as the only unique value we can use
for a lookup. If we encrypt the field in the database, is the only thing we
need to do is encrypt the data the user enters before we issue the CHAIN
command and then everything else works as usual?

Thanks

Mike Cunningham
VP of Information Technology Services/CIO
Pennsylvania College of Technology



________________________________
This email may contain confidential information about a Pennsylvania
College of Technology student. It is intended solely for the use of the
recipient. This email may contain information that is considered an
“educational record” subject to the protections of the Family Educational
Rights and Privacy Act Regulations. The regulations may be found at 34
C.F.R. Part 99 for your reference. The recipient may only use or disclose
the information in accordance with the requirements of the Federal
Educational Rights and Privacy Act Regulations. If you have received this
transmission in error, please notify the sender immediately and permanently
delete the email.
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: http://amzn.to/2dEadiD