Data encryption using RPG

[Anon Anon]

Does anyone have experience of using RPG to protect database data using string encryption?  We need to protect fields containing account information on a Plex RPG created system.   If we could keep everything in process, rather than making a shell call to Java I'd be much happier.  Any suggestions are welcome before I go digging on the IBM site.  thanks,

[Anon Anon]

There are quite a few Cryptography API's available to i5/OS, here is a link into the IBM documentation:  http://publib.boulder.ibm.com/infocenter/iseries/v5r4/topic/apis/catcrypt.htm  These have calls for both OPM and ILE programs.   Your biggest issue will be handling integer data types. Message Edited by MarkMurphy on 06-30-2008 11:25 AM [left]

[Anon Anon]

DB2 SQL has a very easy way to perform data encryption on individual fields.  Assuming that your encryption needs are well defined and limited to a few specific instances, you could generate your required DB io function as SQLRPG400, or even better, SQLRPGIV.  You then replace the db action diagram instructions with source code objects that perform the required SQL.  Your biggest hassle is finding a secure way of dealing with the encryption "passwords".   The "password" is used to derive an encryption key, which then is used in RC2 or triple DES algorithms .

[Dean_Eshleman]

Matthew,  I don't know if you are looking for a commercial solution or not.   I would suggest you check out Linoma Software's Crypto Complete product.   I haven't used this product myself, though I did research it awhile back because we thought we were going to start encrypting some data.   We decided we didn't need the encryption after all.   We do use a couple of Linoma's products and are very satisified with their customer support.   Here is a link http://www.linomasoftware.com/products/crypto.  Dean Eshleman,MMA, Inc.  

[Anon Anon]

That gives me a good headstart.   Many thanks to you all.