RE: _cipher API vs Qc3Encrypt/Qc3DecryptData vs SQL -- RPG400-L

Mike,

Regarding the view....

Just set *PUBLIC *EXCLUDE

Apps that need to use it, could use adopted authority to access the view.

Charles Wilt
Software Engineer
CINTAS Corporation - IT 92B
513.701.1307
wiltc@xxxxxxxxxx

-----Original Message-----
From: rpg400-l-bounces@xxxxxxxxxxxx [mailto:rpg400-l-bounces@xxxxxxxxxxxx]
On Behalf Of Mike Cunningham
Sent: Tuesday, March 25, 2008 4:24 PM
To: 'RPG programming on the AS400 / iSeries'
Subject: RE: _cipher API vs Qc3Encrypt/Qc3DecryptData vs SQL

If you made a view that did a decrypt you would need to keep that view
away from just any old ODBC/JDBC SQL utility command (e.g. Crystal
Reports, Query) or the encryption isn't much good. Wouldn't it be safer to
just decrypt on the SELECT command embedded in the application? Of course
then you have the passwords in clear text in the RPG app you have to worry
about so then it's off to using a keystore to encrypt the keys used to
encrypt the data and of course you have a password to the keystore that
should be encrypted and stored someplace other than the keystore so in
comes TrueCrypt on a PC which has a password which should be stored in an
encrypted database ... In logic class we called this an endless loop :)

-----Original Message-----
From: rpg400-l-bounces@xxxxxxxxxxxx [mailto:rpg400-l-bounces@xxxxxxxxxxxx]
On Behalf Of rob@xxxxxxxxx
Sent: Tuesday, March 25, 2008 4:16 PM
To: RPG programming on the AS400 / iSeries
Subject: RE: _cipher API vs Qc3Encrypt/Qc3DecryptData vs SQL

<snip>
and so you would still need application awareness to decrypt the data.
</snip>

That's what a view is for. ;-)

Rob Berendt
--
Group Dekko Services, LLC
Dept 01.073
Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com

--
This is the RPG programming on the AS400 / iSeries (RPG400-L) mailing list
To post a message email: RPG400-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/rpg400-l
or email: RPG400-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/rpg400-l.

--
This is the RPG programming on the AS400 / iSeries (RPG400-L) mailing list
To post a message email: RPG400-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/rpg400-l
or email: RPG400-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/rpg400-l.

This e-mail transmission contains information that is intended to be confidential and privileged. If you receive this e-mail and you are not a named addressee you are hereby notified that you are not authorized to read, print, retain, copy or disseminate this communication without the consent of the sender and that doing so is prohibited and may be unlawful. Please reply to the message immediately by informing the sender that the message was misdirected. After replying, please delete and otherwise erase it and any attachments from your computer system. Your assistance in correcting this error is appreciated.