Encrypting Database Fields
The majority of the web applications that we design require some level of encryption. Many times, the MD5 or ShA1 hashes work for most and our own encryption schemes work for others.
The technology, written in Java, is called Jasypt. Here is some information about the product.
Jasypt is a java library which allows the developer to add basic encryption capabilities to his/her projects with minimum effort, and without the need of having deep knowledge on how cryptography works.
Features:
- Provides easy encryption tools for little adoption effort.
- Also provides highly configurable standard encryption tools, for power-users.
- All encryption tools comply with encryption best practices and security recommendations. They are also thread-safe to avoid concurrency problems even in multi-threaded environments like web applications.
- Jasypt-hibernate provides a transparent mechanism for persisting data in an encrypted form using Hibernate.
- All encryption tools are designed to be easily integrable into IoC containers like the Spring Framework, although, of course, it can be used without one.
Our database administrators will be testing this technology to see if it meets our quality standards on our projects. We will keep you posted.
























