security...

Discussion of open issues, suggestions and bugs regarding MyDAC (Data Access Components for MySQL) for Delphi, C++Builder, Lazarus (and FPC)
Post Reply
eduardosic

security...

Post by eduardosic » Tue 09 Aug 2005 19:25

It´s possible, core lad´s developers, add suport to encriptation data

example: setting the property Encript in the Query, all data is encripted on insert and all data is decripted on selec,, for protect the database.

it´s possible?

sorry my bad english.

Guest

Post by Guest » Wed 10 Aug 2005 08:06

MyDAC 4.0 supports secure connections encrypted SSL connections with OpenSSL. Please see "Secure connections" and "TMyConnection.SSLOptions" topics in MyDAC help

eduardosic

encrypted data not encrypted connection....

Post by eduardosic » Wed 10 Aug 2005 13:58

I suggest a property for encrypted Rows.

example:

setting the "supost" property encryt on TmyQuery
and setting
SQL > Insert into TblNames (Name) values (:name )

with myQuery do begin
Parambyname( 'Name' ).AsString := 'Eduardo S Santos from Brazil';
Execute;
end;

The value for Field "Name" is inserted in the table, but was encripted...
when execute a select ... the TmyQuery , decript and show the row..

resuming:

TmyQuery ofers support a encriptation/decriptation for Rows....

understand?


Thanks, Eduardo S Santos.

Paul
Posts: 725
Joined: Thu 28 Oct 2004 14:06

Post by Paul » Wed 10 Aug 2005 20:49

SSL is a generally used way for traffic encryption suported by MySQL. It can be used for your tasks.

eduardosic

Local Security...

Post by eduardosic » Wed 10 Aug 2005 23:49

Paul, i don´t talking about SSL, i asking if its possible core labs Add suport
for a Rows encriptation...

I can send a simple program for explain the sugestion?
this feature is important for protect a comercial database.

more one example

Insert Operation
|User front-end Data| >> |TmyQuery with encriptation| >> | Encrited data in mySQL table|

select Operation
|User front-end Data| << |TmyQuery with decriptation| << | Encrited data in mySQL table|

Thanks, Eduardo.

GEswin
Posts: 186
Joined: Wed 03 Nov 2004 16:57
Location: Spain
Contact:

Post by GEswin » Thu 11 Aug 2005 08:18

I would say you're looking for some functionality of MySQL itself, not the components. For encripting data into db and decrypting in selects you must use MySQL's encrypt/decrypt functions. Look at this chapter of MySQL manual:

http://dev.mysql.com/doc/mysql/en/encry ... tions.html

alec

Post by alec » Thu 11 Aug 2005 09:49

eduardosic, good question!
To CoreLabTeam:
What about encryption data for local databases (embedded server)? For example, I make database with commercial data (big list of enterprises - 1 million records) and I want protect this data from external use (passing over my interface).
Is any solutions?
Also request: compressing blobs for all *Dac products. Now I use external Zlib library for this aim.

Thank you!

Paul
Posts: 725
Joined: Thu 28 Oct 2004 14:06

Post by Paul » Fri 12 Aug 2005 08:17

We will consider ability to encrypt data befor storing in database in the future MyDAC releases.

Ikar
Posts: 1693
Joined: Thu 28 Oct 2004 13:56

Post by Ikar » Mon 22 Aug 2005 11:41

This issue concerns most likely MySQL than MyDAC. Implementation of reliable encryption of stored data at the level of client is almost impossible.

Developers of servers (MySQL, MS SQL, Oracle etc) usually assume that data will be stored at the protected disk at the server. Certainly for MySQL Embedded Server it is can be realized rather difficult.

Try to use protected virtual disks like PGP or ask MySQL AB to add this functionality at the next server versions.

Ikar
Posts: 1693
Joined: Thu 28 Oct 2004 13:56

Post by Ikar » Mon 22 Aug 2005 11:43

> Also request: compressing blobs for all *Dac products. Now I use external Zlib
> library for this aim.

We are planning to add this functionality but not at the nearest time.

Guest

Post by Guest » Fri 07 Oct 2005 07:39

this feature is important for me

Ikar
Posts: 1693
Joined: Thu 28 Oct 2004 13:56

Post by Ikar » Fri 07 Oct 2005 14:10

Anonymous wrote:this feature is important for me
Which product do your need it for?

Post Reply