DB Queries over Encrypted strings ? or how ?

Creating desktop or client-server database solutions?

Moderators: FourthWorld, heatherlaine, Klaus, kevinmiller, robinmiller

Post Reply
liveme
Posts: 240
Joined: Thu Aug 27, 2015 5:22 pm

DB Queries over Encrypted strings ? or how ?

Post by liveme »

Hi DB designers,

I'm thinking of applying url dec/encode + Encryption to data Strings users would send from their Mobile/desktop App to a server...

- I likely would URLdecode any Strings once on the server just before storing in the DB. (usefull ??)

but my main wondering is :
- What is the way to run some "Text search" or "content queries" once data is stored if it remains encrypted ?
- Can one run a query over an encrypted stored string in the DB ?does the search criteria requires the same encryption process to match the content ?

- or does one HAVE to decrypt all content columns that is likely to be searched after by general users ?

So that would mean, encryption is only possible during data transfer...but then can not really be used on any stored data.
(encryption here would be used in case the whole DB is hacked or leaks out somehow...)
:?: :?:

So is it protection vs Searchable content ?
Thanks for sharing your way to deal with this.
:idea: 8)
FourthWorld
VIP Livecode Opensource Backer
VIP Livecode Opensource Backer
Posts: 10103
Joined: Sat Apr 08, 2006 7:05 am
Contact:

Re: DB Queries over Encrypted strings ? or how ?

Post by FourthWorld »

SSL should be sufficient. And you can't post an app to the app stores these days that doesn't use SSL.
Richard Gaskin
LiveCode development, training, and consulting services: Fourth World Systems
LiveCode Group on Facebook
LiveCode Group on LinkedIn
liveme
Posts: 240
Joined: Thu Aug 27, 2015 5:22 pm

Re: DB Queries over Encrypted strings ? or how ?

Post by liveme »

hmm, interesting....
So, as for transfering : SSL is already crypting transfered data ..enough you think ?
no need for an extra LC encryption method on top of it then....
:| :arrow:
FourthWorld
VIP Livecode Opensource Backer
VIP Livecode Opensource Backer
Posts: 10103
Joined: Sat Apr 08, 2006 7:05 am
Contact:

Re: DB Queries over Encrypted strings ? or how ?

Post by FourthWorld »

SSL is good enough for banking and medical insurance, it should be okay for most common needs.

If it enough? Is anything enough? ;)
Richard Gaskin
LiveCode development, training, and consulting services: Fourth World Systems
LiveCode Group on Facebook
LiveCode Group on LinkedIn
liveme
Posts: 240
Joined: Thu Aug 27, 2015 5:22 pm

Re: DB Queries over Encrypted strings ? or how ?

Post by liveme »

hmm..
...enough of Covid crisis now !
:P
FourthWorld
VIP Livecode Opensource Backer
VIP Livecode Opensource Backer
Posts: 10103
Joined: Sat Apr 08, 2006 7:05 am
Contact:

Re: DB Queries over Encrypted strings ? or how ?

Post by FourthWorld »

liveme wrote: Sat Feb 27, 2021 3:27 am hmm..
...enough of Covid crisis now !
:P
Amen to that, friend.
Richard Gaskin
LiveCode development, training, and consulting services: Fourth World Systems
LiveCode Group on Facebook
LiveCode Group on LinkedIn
Post Reply