Re: Fast Search on Encrypted Feild

From: "Naoko Reeves" <naoko(at)lawlogix(dot)com>
To: "Merlin Moncure" <mmoncure(at)gmail(dot)com>
Cc: <pgsql-general(at)postgresql(dot)org>
Subject: Re: Fast Search on Encrypted Feild
Date: 2009-11-14 22:00:11
Message-ID: 076DC33A3D38CE4BBC64D35DDD9DE70C09886B1C@mse4be2.mse4.exchange.ms
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

Merlin,
Thank you for your quick response. I see... our security requirements are:
We are encrypting PII information within our DB and because of the sensitive nature of our data, we must balancing both performance and security to meet our client requirements.
Our clients are mainly lawyers and handles clients case (government, healthcare, education).
If you could provide me any advice that would be great otherwise I understand that I have to go without wildcard search.

Naoko

> Would this be the solution for the fast encrypted field search or does this
> raise the security issue?

You are storing the unencrypted phone number in the index...can't do
that. As I see it, any solution that needs to support 'LIKE' (or
anything other than equality case) is going to be problematic because
it has to expose details of the encrypted data to work. It may be
possible to rig something...how high are your security requirements?

merlin

In response to

Responses

Browse pgsql-general by date

  From Date Subject
Next Message John R Pierce 2009-11-14 22:08:23 Re: Fast Search on Encrypted Feild
Previous Message Merlin Moncure 2009-11-14 21:39:54 Re: Fast Search on Encrypted Feild