Page 1 of 1

Encrypted custom profile fields and records fields

Posted: Tue Nov 12, 2019 6:48 am
by jar
Hi,

It would very interesting to have the ability to create new profile fields as well as new records fields and chose that those fields should be encrypted.

Re: Encrypted custom profile fields and records fields

Posted: Tue Nov 12, 2019 11:55 am
by admin
Hi,

The best and easiest way would to encrypt the entire database. Postgress has various options: https://www.postgresql.org/docs/8.1/enc ... tions.html

Re: Encrypted custom profile fields and records fields

Posted: Tue Nov 12, 2019 12:50 pm
by jar
Thank you very much.

Re: Encrypted custom profile fields and records fields

Posted: Mon Nov 25, 2019 1:13 pm
by jar
Hi,

If we encrypt a field of postgreSQL database, like username, that field is shown in cyclos frontend encrypted. This means that Cyclos cannot decrypt the field. Is there a way to show the field decrypted?

To encrypt the field username, we have used this query:
UPDATE users SET
username = PGP_SYM_ENCRYPT((select username from users where id=3001), 'password')
WHERE id=3001;

Ans to decrypt, we use the following query:
SELECT
PGP_SYM_DECRYPT(username::bytea, 'password') as username
FROM users WHERE id=3001; 

Cyclos version: 4.12.3

Re: Encrypted custom profile fields and records fields

Posted: Tue Nov 26, 2019 9:48 am
by admin
This is something that would require various structural changes, something we prefer not to do at this moment.
We still think that encrypting the entire database is really the way to go forward.