加密数据以存储在数据库中

Question

We have a site, where a user will be saving extremely personal and sensitive data in our database.

We of course will need to be encrypting this data before it is stored in the database, and using SSL. It is an MVC application that will use form authentication. what is the best way to ensure that this data is encrypted from the time we save it until the time it is decrypted for display on their personal page.

We need to also ensure that it will be secure from even our developers and dba's working on the app.

What is the best way to handle this situation?

Answer 1

SQL Server具有一些您可能会看到的内置 加密功能（死链接） 加密功能 。

Answer 2

There is no way to keep a DBA out of the data unless you used a public key encryption and the end user would have to control this. If the end user lost their key, they would lose all their data.

You could have a separate database where you store the keys and your DBA wouldn't have access to this DB.

You would have to have two DBAs, one for the data and one for the keys.

This is assuming you don't trust your DBAs, but then you shouldn't have hired them.

If you trust your DBAs, then you let them have access to both DBs, but require that they have separate accounts so if one account gets compromised, they(hackers) wouldn't have access to everything.

Typically, in a well designed system, the DBA/Admins have separate accounts for their personal work and an elevated account for doing work.

I'm assuming the programmers only have access to a test environment. If they have access to the production environment, then they will have access to both the keys and the data.

Answer 3

Every Encryption has a key and the key is ( to get / not to get ) that key :) The best way is to set the key on web.config which you can do without any programming background

---

And I have seen a beautiful AES Encryption Algorithm implementation at StackOverflow . I would suggest you use that.