Field Encryption
Database field encryption has traditionally been very difficult and time-consuming to implement on the System i. In the past, major application changes would have to be made to expand database field sizes and implement complicated API calls to encrypt/decrypt data. The design of Crypto Complete allows organizations to encrypt fields quickly and effectively using intuitive screens and proven technology.
With Crypto Complete’s innovative "Field Encryption Registry", you can simply indicate the database fields to encrypt within your database files. When a field is “activated” in the Registry, Crypto Complete will perform a mass encryption of the current values for that field. Crypto Complete can then automatically encrypt the field values on an ongoing basis as new database records are added and when existing field values are changed. This automated feature saves significant time and money for customers, since applications do not need to be changed for data encryption.
You can optionally modify your applications to encrypt data through program (API) calls to Crypto Complete’s encryption procedures and programs. Crypto Complete also includes stored procedures and SQL functions which can be called from within native applications or other external clients (i.e. graphical or web-based front ends) for encryption/decryption.
System i database fields can be protected in Crypto Complete using either AES and TDES encryption algorithms. Both of these algorithms follow standard (non-proprietary) specifications as published by the United States National Institute of Standards and Technology (NIST). AES and TDES are widely used for protecting highly sensitive data and complying with PCI DSS, HIPAA and State Privacy laws.
For AES encryption, you can choose between the key lengths of AES128, AES192 and AES256.
You can encrypt almost any System i database field with Crypto Complete. Field encryption examples:
- Credit card numbers (PAN)
- Social security numbers
- Bank account numbers
- Health-related information
- Wages
- Financial data
The System i is also referred to as IBM i, iSeries, AS/400, AS400 and i5
