SQL joins on encrypted data

Tags:
Database
IBM DB2
Management
Microsoft Windows
Oracle
OS
Security
Servers
SQL Server
Web site design & management
Hi - we are in the process of encrypting various pieces of sensitive information in our SQL 2000 tables. For many fields we are using Blowfish 448 encryption and a concern has arisen about inline SQL statements that contain joins in our ASP scripts. Are there any scenarios that you have run across where there may be a problem with a join of encrypted data? Could there ever be an instance where the encrypted field (encrypted by Blowfish) in one table would be different from the field in another table given the same initial string, which upon executing the join would cause the join to fail? To be more clear here is a quick example: Table A has an encrypted account number column. Table B also has an encrypted account number column (same data). If we have a SQL statement that performs a join on the account number columns in the two tables is there any possibility that the join will fail because the Blowfish encryption somehow yielded a different value? Any thoughts you have would be helpful. Thanks, Tim

Answer Wiki

Thanks. We'll let you know when a new response is added.

If your encryption padds the encrypted value with filler data then yes, the join could fail as the values wouldn’t match. If you aren’t padding the encrypted value then your values should match and you should be able to do the join.

Discuss This Question:  

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following