Re: using mySQL to store credit card info
I would also like to do the same thing, I have credit card numbers in an old database (DBF) which I have migrated to an MySQL version.
With regards to Michael's question I think AES is strong enough...the MySQL reference doc (http://dev.mysql.com/doc/mysql/en/encryption-functions.html) suggests that AES was previously known as RSA and also points out..
"AES_ENCRYPT() and AES_DECRYPT() were added in MySQL 4.0.2, and can be considered the most cryptographically secure encryption functions currently available in MySQL."
and this guy (http://www.aota.net/forums/showthread.php?postid=46371#post46371) suggests that a strong RSA should be suitable for out task of storing credit card numbers.
I need to find a way of storing these numbers in encrypted form so I am trying to perform some test, i.e. use a keystring and some text to create the encrypted version of the key
e.g. SELECT AES_ENCRYPT('000102030405060708090A0B0C0D0E0F','000102030405060708090A0B0C0D0E0F')
should produce "0a940bb5416ef045f1c39458c653ea5a" but I simple get garbage on my screen, can anyone point me in the right direction to get things working or perhaps show me a tutorial that does?
Subject
Views
Written By
Posted
27792
February 03, 2005 03:44PM
11623
March 29, 2005 07:54AM
9758
June 26, 2005 10:25PM
10623
July 23, 2005 10:39PM
Re: using mySQL to store credit card info
14684
September 08, 2005 06:04AM
24223
September 08, 2005 06:47AM
7968
September 20, 2005 09:00AM
7481
November 21, 2005 11:09PM
7069
November 28, 2005 05:36AM
6893
November 28, 2005 08:21PM
6952
November 29, 2005 05:51PM
6891
February 18, 2006 06:34PM
6463
April 06, 2006 09:41AM
6752
April 07, 2006 01:28PM
7186
April 19, 2006 08:23PM
9485
May 08, 2006 04:33PM
9205
October 04, 2006 09:11AM
6367
February 20, 2008 12:58PM
6545
February 20, 2008 01:24PM
6440
January 06, 2007 07:26PM
5314
February 16, 2009 07:37PM
Sorry, you can't reply to this topic. It has been closed.
Content reproduced on this site is the property of the respective copyright holders.
It is not reviewed in advance by Oracle and does not necessarily represent the opinion
of Oracle or any other party.