Re: using mySQL to store credit card info
I would also like to do the same thing, I have credit card numbers in an old database (DBF) which I have migrated to an MySQL version.
With regards to Michael's question I think AES is strong enough...the MySQL reference doc (http://dev.mysql.com/doc/mysql/en/encryption-functions.html) suggests that AES was previously known as RSA and also points out..
"AES_ENCRYPT() and AES_DECRYPT() were added in MySQL 4.0.2, and can be considered the most cryptographically secure encryption functions currently available in MySQL."
and this guy (http://www.aota.net/forums/showthread.php?postid=46371#post46371) suggests that a strong RSA should be suitable for out task of storing credit card numbers.
I need to find a way of storing these numbers in encrypted form so I am trying to perform some test, i.e. use a keystring and some text to create the encrypted version of the key
e.g. SELECT AES_ENCRYPT('000102030405060708090A0B0C0D0E0F','000102030405060708090A0B0C0D0E0F')
should produce "0a940bb5416ef045f1c39458c653ea5a" but I simple get garbage on my screen, can anyone point me in the right direction to get things working or perhaps show me a tutorial that does?
Subject
Views
Written By
Posted
27681
February 03, 2005 03:44PM
11572
March 29, 2005 07:54AM
9728
June 26, 2005 10:25PM
10576
July 23, 2005 10:39PM
Re: using mySQL to store credit card info
14611
September 08, 2005 06:04AM
24187
September 08, 2005 06:47AM
7923
September 20, 2005 09:00AM
7434
November 21, 2005 11:09PM
7033
November 28, 2005 05:36AM
6850
November 28, 2005 08:21PM
6913
November 29, 2005 05:51PM
6846
February 18, 2006 06:34PM
6425
April 06, 2006 09:41AM
6705
April 07, 2006 01:28PM
7157
April 19, 2006 08:23PM
9449
May 08, 2006 04:33PM
9161
October 04, 2006 09:11AM
6315
February 20, 2008 12:58PM
6496
February 20, 2008 01:24PM
6394
January 06, 2007 07:26PM
5265
February 16, 2009 07:37PM
Sorry, you can't reply to this topic. It has been closed.
Content reproduced on this site is the property of the respective copyright holders.
It is not reviewed in advance by Oracle and does not necessarily represent the opinion
of Oracle or any other party.