Re: Encrypting data Was: Securing tape backup drive

["Roger Vicker, CCP" <rv-tech@xxxxxxxxxx>]

Yes, now that you have looked into the future and answered 1/2 of my
next question, that would have been on the RPG-L, with sample code. The
other half will be, how do you handle the password so that it isn't
handed to the morons along with the tape? Put it in the source, compile,
blank it in the source...

Roger

On 3/19/2007 12:32 PM, rob@xxxxxxxxx wrote:
> You mean like:
>   
> > CREATE TABLE ROB/VICKER 
> >     
>    (MYKEY INT AS IDENTITY, 
>     MYSSN CHAR(32) for bit data not null
>   PRIMARY KEY (MYKEY)) 
>   Table VICKER created in ROB. 
> // Notice the size on MYSSN? 
> // Length of data + 16 bytes for encryption + 5 bytes to next 8 byte 
> boundary.
>   
> > set encryption password = 'Ben123' 
> > INSERT INTO ROB/VICKER (MYSSN) 
> >     
>   VALUES(ENCRYPT_TDES('289-46-8832')) 
>   1 rows inserted in VICKER in ROB. 
>   
> > select * from rob/vicker 
> >     
>   SELECT statement run complete. 
> ....+....1....+....2....+....3....+....4....+...
>         MYKEY   MYSSN 
>             1      Ÿ  Nµ¾/Ø&?Ú| ðygÝ=üäŸ S í L¤I
> ********  End of data  ******** 
>   
> > select mykey, decrypt_char(myssn) as DisplaySSN
> >     
>   from rob/vicker 
> ....+....1....+....2....+....3
>         MYKEY   DISPLAYSSN 
>             1   289-46-8832 
> ********  End of data  *******
>
>
> http://publib.boulder.ibm.com/infocenter/iseries/v5r4/topic/db2/rbafzmstscale.htm#scaencrypt
> http://publib.boulder.ibm.com/infocenter/iseries/v5r4/topic/db2/rbafzmstscale.htm#scaencrypttdes
> http://publib.boulder.ibm.com/infocenter/iseries/v5r4/topic/db2/rbafzmstscale.htm#scadecrypt
>
> Rob Berendt
>