Fields can be encrypted "to help thwart identity theft if access to your database becomes compromised." However, the encryption key itself is stored as a variable in the database. If the database is compromised, wouldn't the attacker be able to retrieve the key and then decrypt the data? Am I missing something?

Comments

john.money’s picture

john.money commented

Hrm... I have to think some on how to store the key while still enabling some degree of ease of configuration. But you're right.

vector0319’s picture

vector0319 commented

Maybe you could store the key in the settings.php file like the encrypted_text module does? Would allow for at least a little more security in that they have to get access to the db and the file system.

Jeremy

threexk’s picture

threexk commented

agree with vector0319. If not settings.php, some file outside the database that normally should be protected.

john.money’s picture

john.money commented

Excellent idea. Will implement shortly. Thanks.

chrisschaub’s picture

chrisschaub commented

The file should be stored above the docroot, in a folder that has read only perms after it is created, like settings.php. Ubercart does this with a key file directory and keyfile.

john.money’s picture

john.money commented

Fixed in release 2.0

http://drupal.org/node/425596

john.money’s picture

john.money commented
Status: Active » Fixed
john.money’s picture

john.money commented
Status: Fixed » Closed (fixed)