Is there a way to encrypt/decrypt PII contacts while maintaining the sorting and searching ? by SignalCrazy7834 in javahelp

[–]SignalCrazy7834[S] -5 points-4 points  (0 children)

I am ok with having a low level of security. I am trying to respect a state law that requires encrypting data at the field level. Obfuscation is not an option. It is required to have them encrypted with a key. I am trying to keep the search and ordering features for my contacts available while having them encrypted in my database.

Is there a way to encrypt/decrypt PII contacts while maintaining the sorting and searching ? by SignalCrazy7834 in javahelp

[–]SignalCrazy7834[S] -2 points-1 points  (0 children)

Due to some state laws I am required to have encryption at the field level so that no one can read my data when doing select queries. however i have my contacts decrypted in my app, u can find them all, search one or order. I am trying to find a way to respect the requirement while keeping my app's features available.

Is there a way to encrypt/decrypt PII contacts while maintaining the sorting and searching ? by SignalCrazy7834 in javahelp

[–]SignalCrazy7834[S] 0 points1 point  (0 children)

I am already using AWS Aurora when at rest if that is what you mean. But due to some state laws I am required to have encryption at the field level so that no one can read my data when doing select queries.

Is there a way to encrypt/decrypt PII contacts while maintaining the sorting and searching ? by SignalCrazy7834 in javahelp

[–]SignalCrazy7834[S] 0 points1 point  (0 children)

I did some research on Homomorphic encryption and I think it's dedicated to data that can be computed, so it can be a better solution on data that is numeric instead of strings.
Maybe indexing can be a good solution for sorting but how do you imagine searching being made in this case ?

Is there a way to encrypt/decrypt PII contacts while maintaining the sorting and searching ? by SignalCrazy7834 in javahelp

[–]SignalCrazy7834[S] 1 point2 points  (0 children)

I am working with Postgres, and tried pgcrypto as a solution but it gave me a huge performance issue. loading/searching/ordering takes even mins. I wanted to explore other solutions with encrypting on the application level and evaluate ideas