Encrypted Data

[Arne]

I need to create a sql column with Encrypted Credit Card. Fortunately .Net
has a crypto API.
Where would be a good place to store the key?
Supposedly windows has a crypto store somewhere.

 

[Jim Brandley]

We used the MD5 hash (from a fixed plaintext string) to regenrate the key
when needed.

 

[Arne]

Jim,
Do you have a safe place to store the plaintext string?
Arne.

 

[Daniel Fisher\(lennybacon\)]

I don't wanna buy stuff in a store that stores such sensitive data. Use a
hash or leave it. Please.

 

[Jim Brandley]

It's just a sting constant in the code.

Jim,
Do you have a safe place to store the plaintext string?
Arne.

 

[Arne]

A hash is a one way encryption and it will not do any good for me.
A hash would be useful for passwords only.
Arne.