[erlang-questions] Encrypting/Decrypting data

[Steve Strong]

To give a good answer, I think we need a bit more info about what you're trying to do.  Is the data that you're encrypting only stored on the server? Is it specific to individual users and only accessed when the "owner" is accessing the server, or is the data needed by the server for processing at arbitrary points in time? How much data is being encrypted? Who are you trying to secure the data from? Others accessing the system? Back office staff? System administrators?

Knowing a bit more will make it easier to help :)

Cheers,

Steve

Sent from my iPad

On 30 Oct 2011, at 16:58, Kristen Eisenberg <kristen.eisenberg@REDACTED> wrote:

> This is a bit more of a general question than Erlang specific but I hope someone here can answer this, or simply point me to a place where it has already been answered.
> I'm writing a server in which I will be storing encrypted user data (unlike Sony). My problem is probably a product of zero experience with encryption combined with a lack of sleep, but I can't figure out how to do this securely. By that I mean I understand how to use crypto to encrypt/decrypt a piece of data but the Key and the Ivec have to be the same for both the encryption and decryption otherwise it doesn't work...so how do I make this happen without storing those two things "out in the open?" It seems like that can't be the optimal solution since anyone who could just grab those and decrypt the data. Am I missing something completely obvious?
> Chris Hicks.
> 
> Kristen Eisenberg
> Billige Flüge
> Marketing GmbH
> Emanuelstr. 3,
> 10317 Berlin
> Deutschland
> Telefon: +49 (33)
> 5310967
> Email:
> utebachmeier at
> gmail.com
> Site:
> http://flug.airego.de - Billige Flüge vergleichen
> _______________________________________________
> erlang-questions mailing list
> erlang-questions@REDACTED
> http://erlang.org/mailman/listinfo/erlang-questions
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://erlang.org/pipermail/erlang-questions/attachments/20111030/e22ff158/attachment.htm>