[digioz]

Hello everyone,

I am trying to store a string into MySQL Database in encrypted format using the AES_Encrypt/AES_DECRYPT Function, that is available for MySQL version 4.0.2 and higher ( I use 4.1.x, so the version is fine). Here is my SQL Strings:

For Insert Into Database:

Code:

INSERT INTO tableName VALUES (AES_ENCRYPT('1234567891234567', 'motb6q4x79yoefbj' ));

Where 'motb6q4x79yoefbj' is an encryption key generated by random using a random string generating function.

Query to retrieve and Decrypt the string:

Code:

SELECT AES_DECRYPT(ccnum,'motb6q4x79yoefbj') FROM tableName;

As far as the MySQL Table that is being used, its a single column table with Data Type VARCHAR and length of 100 characters (for testing purposes only).

The INSERT SQL statement executes fine. However, the Query to retrieve and Decrypt the string generates the following error:

Code:

#1064 - You have an error in your SQL syntax;

Does anyone see anything wrong with the SQL Syntax being used here?

[digioz]

I just found the answer to my question. Here is the correct syntax for the Query (in case anyone else is interested in using this):

Code:

SELECT AES_DECRYPT(ccnum, 'motb6q4x79yoefbj') AS decrypted FROM tableName;

For more information about AES_ENCRYPT/DECRYPT, you can take a look at:

http://dev.mysql.com/doc/mysql/en/en...functions.html

[mayki]

Hello =)
I'm kind of new in SQL, and I'd like to know what is that ccnum parameter in AES_DECRYPT function...
Thank you wery much
majky

SELECT AES_DECRYPT(ccnum,'motb6q4x79yoefbj') FROM tableName;

[digioz]

The ccnum parameter is a database column that stores credit card information. In reality, the ccnum parameter can be anything you want it to be, from password to an encrypted email.

Just don't loose the key you use, because if you loose the key your original values are gone for good!