[thelist] GnuPG and Coldfusion

[Daniel J. Cody]

Hey Bruce -

If you're using oracle 8.1.5 or later, you can use the encryption tools 
that it provides..

Have a look at the DBMS_OBFUSCATION_TOOLKIT package. It has DESEncrypt 
and DESDecrypt procedures. It performs a 56 bit encryption, which should 
be good enough for what you're doing..

Theres also some code for a stored proc at 
http://www.oracle.com/oramag/code/index.html?cod11226.html its a bit 
older, but still applies.

Hope that helps :)

.djc.


Bruce Heerssen wrote:

> Well, my boss wants to store credit card numbers in our database (over 
> my strong objection) so now I need to get them encrypted. This is not 
> something I've done before. I'm reading up on the subject, but the docs 
> seem a little unclear - can someone provide a basic rundown of the 
> process starting from the time CF receives the credit card data to the 
> time it transmits the encrypted data to the database?
> 
> We are using CF 4.5 on Solaris with Oracle on a seperate Solaris server. 
> I am looking at using GnuGP
> 
> (http://www.gnupg.org)
> 
> Any other advice (pitfalls, etc) would also be well received.