Encrypting credit card data

Fairlight fairlite at fairlite.com
Sun Jun 14 21:27:05 PDT 2009


You'll never BELIEVE what George Simon said here...:
> Does anyone know of a recognized encrypting program that can run from
> within a filePro application?  Basically, I need to encrypt the credit
> card number, store it in a filePro database, along with the customer's
> account number (not encrypted) and then be able to decrypt it once it
> is needed again.  I've been doing my own "encryption" by basically
> re-arranging the middle numbers of the credit card.  However, that is not
> good enough for Visa/Mastercard.  Thanks

You neglect to cite your platform.  I seem to remember you're a Windows
user, however.

GPG would do it.  Problem is, it's potentially a lot easier to do it
"correctly" on Windows in the sense of piping the passphrase to a file
descriptor via USER than it is to do it on Windows.  You can encrypt
without using a passphrase if you configure it properly, but you need to
supply a passphrase to decrypt, period.

In *nix, you can pipe that information in on GPG's STDIN channel.  On
Windows, fP doesn't have USER, so you'd have to do something lame like put
it in a batch file, which makes it that much easier to peel open, since if
you can embed it in fP's processing table and have it encrypted (-not-
ABE=ASCII), then at least the passphrase is tucked away somewhere
"moderately" safe.

There are some front-ends to GPG for Windows that may help with this sort
of thing, as I recall.  You should try Google and take it from there.

mark->
-- 
"I'm not subtle. I'm not pretty, and I'll piss off a lot of people along
the way. But I'll get the job done" --Captain Matthew Gideon, "Crusade"


More information about the Filepro-list mailing list