acsess encryption

[Jamie]

I am using Microsoft's Acsess database. The problem is I working with
credit card #s and need to encrypt these #s from other employees. The
only field I want to encrypt is that particular field. If any
individual can help resolve this issue please lend a hand.

[Tom van Stiphout]

Re: acsess encryption

On 30 Oct 2003 15:21:56 -0800, jamiedeven@hotm ail.com (Jamie) wrote:

How strong do you need the encryption to be?
Can these "other employees" run your app, and see the plain-text
version of the CCN?

-Tom.

[color=blue]
>I am using Microsoft's Acsess database. The problem is I working with
>credit card #s and need to encrypt these #s from other employees. The
>only field I want to encrypt is that particular field. If any
>individual can help resolve this issue please lend a hand.[/color]

[TC]

Re: acsess encryption

It depends how seriously you expect someone to try & hack the numbers out.

If the scheme must withstand *serious attack from knowledegable individuals
or groups*, you should:
- encrypt the #s with a well-known, cryptographical ly secure cipher such as
RC4, 3DES, AES etc;
- ensure the encryption key(s) are large enough, and *not stored anywhere
within the database*, and
- have your whole scheme evaluated by a professional cryptgrapher, becase
there are *many traps for the unwary*.

If the scheme need *not* withstand serious attack from knowledegable
individuals or groups, there are various simple things you could do, but I
am reluctant to suggest them, because they would not provide a level of
security which is appropriate for credit card numbers!

HTH,
TC


"Jamie" <jamiedeven@hot mail.com> wrote in message
news:a027ee3.03 10301521.53f7a8 9c@posting.goog le.com...[color=blue]
> I am using Microsoft's Acsess database. The problem is I working with
> credit card #s and need to encrypt these #s from other employees. The
> only field I want to encrypt is that particular field. If any
> individual can help resolve this issue please lend a hand.[/color]