RE: Field encryption for a unique key field -- MIDRANGE-L

Thanks Charles, that’s a really cool implementation IBM did.

-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Charles Wilt
Sent: Thursday, December 15, 2016 9:31 AM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
Subject: Re: Field encryption for a unique key field

Mike,

If you're using FIELDPROC support, I don't think you need to do anything.
The DB does it transparently behind the scenes.

One tidbit this article,
http://www.ibmsystemsmag.com/power/Systems-Management/Security/townsend_fieldproc/?page=3

CHAIN/SETLL will work as expected, but READ doesn't return in the order expected (as the index is encrypted)

If you want to use the masking support, be sure to understand the options for FIELDPROC_ENCODED_COMPARISON value in QAQQINI.
http://www.mcpressonline.com/rpg/db2-field-procedures-finally-support-conditional-masking.html

Charles

On Wed, Dec 14, 2016 at 11:25 AM, Mike Cunningham <mike.cunningham@xxxxxxx>
wrote:

We have a field we need to encrypt but we have multiple RPG applicants
that do a CHAIN and some SQL that do a SELECT WHERE on the field as a
unique key. We need to let users find a record using this key field as
we get lots of government data with this as the only unique value we
can use for a lookup. If we encrypt the field in the database, is the
only thing we need to do is encrypt the data the user enters before we
issue the CHAIN command and then everything else works as usual?

Thanks

Mike Cunningham
VP of Information Technology Services/CIO Pennsylvania College of
Technology

________________________________
This email may contain confidential information about a Pennsylvania
College of Technology student. It is intended solely for the use of
the recipient. This email may contain information that is considered
an “educational record” subject to the protections of the Family
Educational Rights and Privacy Act Regulations. The regulations may be
found at 34 C.F.R. Part 99 for your reference. The recipient may only
use or disclose the information in accordance with the requirements of
the Federal Educational Rights and Privacy Act Regulations. If you
have received this transmission in error, please notify the sender
immediately and permanently delete the email.
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take
a moment to review the archives at
http://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: http://amzn.to/2dEadiD

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a moment to review the archives at http://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related questions.

Help support midrange.com by shopping at amazon.com with our affiliate link: http://amzn.to/2dEadiD

________________________________
This email may contain confidential information about a Pennsylvania College of Technology student. It is intended solely for the use of the recipient. This email may contain information that is considered an “educational record” subject to the protections of the Family Educational Rights and Privacy Act Regulations. The regulations may be found at 34 C.F.R. Part 99 for your reference. The recipient may only use or disclose the information in accordance with the requirements of the Federal Educational Rights and Privacy Act Regulations. If you have received this transmission in error, please notify the sender immediately and permanently delete the email.