You can avoid this by handling hashing in the PHP code, which also offers better portability because it
doesn??™t rely on MySQL. For more details on MySQL encryption functions, please consult the manual
at http://dev.mysql.com/doc/refman/5.1/en/encryption-functions.html.
Implementing the Encryption Functionality in the Business Tier
Encryption comes in many shapes and sizes and continues to be a hot topic. There is no
definitive solution to encrypting data, although there is plenty of advice on the subject. In
general, the two forms of encryption are as follows:
Symmetric encryption: A single key is used both to encrypt and to decrypt data.
Asymmetric encryption: Separate keys are used to encrypt and decrypt data. The encryption
key is commonly known as the public key, and anyone can use it to encrypt information.
The decryption key is known as the private key because it can be used only to decrypt data
that has been encrypted using the public key. The encryption key (public key) and the
decryption key (private key) are mathematically related and are always generated in pairs.
The public key and private key can??™t be obtained one from another. If you have a public
key/private key pair, you can send the public key to parties that need to encrypt information
for you. You will be the only one who knows the private key associated with that public
key and thus the only one able to decrypt the information.
Pages:
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605