Encrypted custom profile fields and records fields

Here you can put ideas for new functionalities and improvements.

Moderators: hugo, alexandre, rmvanarkel

Post Reply
jar
Posts: 121
Joined: Mon Apr 20, 2015 8:55 am

Encrypted custom profile fields and records fields

Post by jar »

Hi,

It would very interesting to have the ability to create new profile fields as well as new records fields and chose that those fields should be encrypted.
Thanks for your kind attention.
Best regards,

JAR
admin
Site Admin
Posts: 1423
Joined: Mon Jan 24, 2005 10:31 am

Re: Encrypted custom profile fields and records fields

Post by admin »

Hi,

The best and easiest way would to encrypt the entire database. Postgress has various options: https://www.postgresql.org/docs/8.1/enc ... tions.html
jar
Posts: 121
Joined: Mon Apr 20, 2015 8:55 am

Re: Encrypted custom profile fields and records fields

Post by jar »

Thank you very much.
Thanks for your kind attention.
Best regards,

JAR
jar
Posts: 121
Joined: Mon Apr 20, 2015 8:55 am

Re: Encrypted custom profile fields and records fields

Post by jar »

Hi,

If we encrypt a field of postgreSQL database, like username, that field is shown in cyclos frontend encrypted. This means that Cyclos cannot decrypt the field. Is there a way to show the field decrypted?

To encrypt the field username, we have used this query:
UPDATE users SET
username = PGP_SYM_ENCRYPT((select username from users where id=3001), 'password')
WHERE id=3001;

Ans to decrypt, we use the following query:
SELECT
PGP_SYM_DECRYPT(username::bytea, 'password') as username
FROM users WHERE id=3001; 

Cyclos version: 4.12.3
Thanks for your kind attention.
Best regards,

JAR
admin
Site Admin
Posts: 1423
Joined: Mon Jan 24, 2005 10:31 am

Re: Encrypted custom profile fields and records fields

Post by admin »

This is something that would require various structural changes, something we prefer not to do at this moment.
We still think that encrypting the entire database is really the way to go forward.
Post Reply