Re: [U2] Encryption of data in place

Bob Witney <[email protected]> Fri, 21 Feb 2014 07:54:12 +0000
Newsgroups gmane.comp.db.u2.general
Message-ID <44542F3444B7E74EB760F4061D7E44121781C941@EWWEXCH01.exploreworldwide.com>
We use this code to encrypt:

SUBROUTINE EWENCRYPT(DATASTRING,OPSTRING,RETURN.CODE)

      RESULT=""
      ALGORITHM="rc2-cbc"	                     ; * 128 bit rc2 algorithm in CBC mode
      MYKEY="23232323"	; * HEX - Actual Key
      IV=   "12121212"	               ; * HEX - Initialization Vector
      DATALOC=1                           		; * Data in String
      KEYLOC=1	                          	      ; * Key in String
      ACTION=2	                           	   ; * Base64 encode after encryption
      KEYACTION=1                              	; * KEY_ACTUAL_OPENSSL
      SALT=''                                 ; * SALT not used
      RESULTLOC=1                              	; * Result in String RESULT
      OPSTRING = ''
      RETURN.CODE=ENCRYPT(ALGORITHM,ACTION,DATASTRING,DATALOC,MYKEY,KEYLOC,KEYACTION,SALT,IV,OPSTRING,RESULTLOC)

      RETURN

   END

And this this to decrypt:

      SUBROUTINE EWDECRYPT(DATASTRING,OPSTRING,RETURNCODE)

      RESULT=""
      ALGORITHM="rc2-cbc"	                     ; * 128 bit rc2 algorithm in CBC mode
      MYKEY="23232323"	; * HEX - Actual Key
      IV=   "12121212"	               ; * HEX - Initialization Vector      DATALOC=1                           		; * Data in String
      KEYLOC=1	                          	      ; * Key in String
      KEYACTION=1                              	; * KEY_ACTUAL_OPENSSL
      SALT=''                                 ; * SALT not used
      RESULTLOC=1                              	; * Result in String RESULT
      ACTION="4"                        		; * Base64 decode before encryption
      OPSTRING = ''
      RETURN.CODE=ENCRYPT(ALGORITHM,ACTION,DATASTRING,DATALOC,MYKEY,KEYLOC,KEYACTION,SALT,IV,OPSTRING,RESULTLOC)
      FinalTime=SYSTEM(9)               ; * Time program ran in milliseconds

      RETURN

   END

You'll need to give it your own MYKEY and IV because I have obviously not put the ones we use in the examples above :-)

If you have the ENCRYPT/DECRYPT routines in Unidata that works just fine (we use Universe)

Bob


-----Original Message-----
From: [email protected] [mailto:[email protected]] On Behalf Of Jeffrey Butera
Sent: 20 February 2014 15:44
To: U2 Users List
Subject: [U2] Encryption of data in place

So with the Univ of Maryland's data breach, everyone is starting to ask questions (again).

Can someone remind me which Unidata manual covers encryption of data in place?

Unfortunately Datatel/Ellucian does not support this, but it wouldn't be the first feature of Unidata we've used without their support...


-- 
Jeffrey Butera, PhD
Associate Director for Applications and Web Services
Information Technology
Hampshire College
413-559-5556

http://www.hampshire.edu
http://www.facebook.com/hampshirecollegeit

_______________________________________________
U2-Users mailing list
[email protected]
http://listserver.u2ug.org/mailman/listinfo/u2-users

______________________________________________________________________
This email has been scanned by the Symantec Email Security.cloud service.
For more information please visit http://www.symanteccloud.com
______________________________________________________________________

Confidentiality Notice:  This e-mail and any attachments are intended solely for the addressee and may contain confidential or privileged  information.   If you are not the named addressee, or the person responsible for delivering the message to the named addressee, please notify the sender as soon as possible and delete the material from your computer.  This message will be protected by copyright.  If it has come to you in error, you must not take any action based on its contents nor must you copy or show the message to any person other than the intended recipient. 
_____________________________________________________________________
This email has been scanned by the Symantec Email Security.cloud service.
For more information please visit http://www.symanteccloud.com
______________________________________________________________________
_______________________________________________
U2-Users mailing list
[email protected]
http://listserver.u2ug.org/mailman/listinfo/u2-users