DB Queries over Encrypted strings ? or how ?

Creating desktop or client-server database solutions?

Moderators: FourthWorld, heatherlaine, Klaus, kevinmiller, robinmiller

Post Reply
liveme
Posts: 240
Joined: Thu Aug 27, 2015 5:22 pm
Location: down under

DB Queries over Encrypted strings ? or how ?

Post by liveme » Fri Feb 26, 2021 11:44 pm

Hi DB designers,

I'm thinking of applying url dec/encode + Encryption to data Strings users would send from their Mobile/desktop App to a server...

- I likely would URLdecode any Strings once on the server just before storing in the DB. (usefull ??)

but my main wondering is :
- What is the way to run some "Text search" or "content queries" once data is stored if it remains encrypted ?
- Can one run a query over an encrypted stored string in the DB ?does the search criteria requires the same encryption process to match the content ?

- or does one HAVE to decrypt all content columns that is likely to be searched after by general users ?

So that would mean, encryption is only possible during data transfer...but then can not really be used on any stored data.
(encryption here would be used in case the whole DB is hacked or leaks out somehow...)
:?: :?:

So is it protection vs Searchable content ?
Thanks for sharing your way to deal with this.
:idea: 8)

FourthWorld
VIP Livecode Opensource Backer
VIP Livecode Opensource Backer
Posts: 9801
Joined: Sat Apr 08, 2006 7:05 am
Location: Los Angeles
Contact:

Re: DB Queries over Encrypted strings ? or how ?

Post by FourthWorld » Sat Feb 27, 2021 1:27 am

SSL should be sufficient. And you can't post an app to the app stores these days that doesn't use SSL.
Richard Gaskin
LiveCode development, training, and consulting services: Fourth World Systems
LiveCode Group on Facebook
LiveCode Group on LinkedIn

liveme
Posts: 240
Joined: Thu Aug 27, 2015 5:22 pm
Location: down under

Re: DB Queries over Encrypted strings ? or how ?

Post by liveme » Sat Feb 27, 2021 1:53 am

hmm, interesting....
So, as for transfering : SSL is already crypting transfered data ..enough you think ?
no need for an extra LC encryption method on top of it then....
:| :arrow:

FourthWorld
VIP Livecode Opensource Backer
VIP Livecode Opensource Backer
Posts: 9801
Joined: Sat Apr 08, 2006 7:05 am
Location: Los Angeles
Contact:

Re: DB Queries over Encrypted strings ? or how ?

Post by FourthWorld » Sat Feb 27, 2021 2:31 am

SSL is good enough for banking and medical insurance, it should be okay for most common needs.

If it enough? Is anything enough? ;)
Richard Gaskin
LiveCode development, training, and consulting services: Fourth World Systems
LiveCode Group on Facebook
LiveCode Group on LinkedIn

liveme
Posts: 240
Joined: Thu Aug 27, 2015 5:22 pm
Location: down under

Re: DB Queries over Encrypted strings ? or how ?

Post by liveme » Sat Feb 27, 2021 3:27 am

hmm..
...enough of Covid crisis now !
:P

FourthWorld
VIP Livecode Opensource Backer
VIP Livecode Opensource Backer
Posts: 9801
Joined: Sat Apr 08, 2006 7:05 am
Location: Los Angeles
Contact:

Re: DB Queries over Encrypted strings ? or how ?

Post by FourthWorld » Sat Feb 27, 2021 4:48 am

liveme wrote:
Sat Feb 27, 2021 3:27 am
hmm..
...enough of Covid crisis now !
:P
Amen to that, friend.
Richard Gaskin
LiveCode development, training, and consulting services: Fourth World Systems
LiveCode Group on Facebook
LiveCode Group on LinkedIn

Post Reply

Return to “Databases”