MySql and Encryption

[vilian]

Hi Guys,

In my country, we have a LGPD(General Protection data Law) that is demanding us to encrypt data. When we were using ADSSERVER, we used to work with encryption just doing AdsEnableEncryption("PSW") in the main program. Is there any way to do the same with MySql ? Is it possible ?

[nageswaragunupudi]

https://dev.mysql.com/doc/refman/8.4/en ... on-default

[nageswaragunupudi]

We will work on it.

[vilian]

Thank you Mr Rao,

If you need some help to try it, just let me know

[vilian]

Dear Mr Rao,

Could we use MySQL Enterprise Transparent Data Encryption (TDE) (https://www.mysql.com/products/enterprise/tde.html) with FWH ?

[Otto]

Hello friends,

For my DBF files, I'm testing an approach like this.

I initially wanted to use AES (fwrite()), but then I wouldn't have full-text search capabilities, and I think FTS wouldn't work even with TDE.

This type of encryption I use now isn't entirely secure, but since only we use this system, I think it's sufficiently secure.
If you use symmetric encryption based on a specific method, such as ASCII conversion followed by encryption with a code, you could transform the search term in the same way.

Here are the steps you should consider:
Preparation of the search term: Convert the search term into the same format you used for the data in the DBF file (e.g., ASCII conversion).
Application of the encryption: Apply the same encryption algorithm to the transformed search term. This will give you an encrypted search term.
Searching in the encrypted data: Then, search for the encrypted search term in the DBF files.

It’s important to note that this method only works if you apply the exact same transformation to both the stored data and the search terms.
Additionally, complex search operations (like substring searches) may be difficult since you can only look for exact matches.

Furthermore, this method could be vulnerable to attacks if the encryption algorithm or code becomes known.

Best regards,
Otto

[vilian]

Hi Otto,
Thanks for your comment. When I used DBF/ADS files, I used to work with ADS encryption and it works very well.
But now, i need to do tis with MySql.