MYSQL Database Encryption

I made this video for my database class at Full Sail. In it I talk about some basic salt usage and the built in aes_decrypt and aes_encrypt functionality of MYSQL.

[@paulonyoutube]

A very good intro to basic decryptable encryption. 👍

[@constantinefragkos4265]

For values like the password in which you will never need to use the original cleartext again, using encryption is bad practice because if the key is compromised it could be reversed by an attacker. Instead for passwords, user for PHP password_hash and password_verify functions(and generally any bcrypt) to do this.

[@Sigmatc24]

Thank you very much, CAST function solves my problems. Also the salt addition is also huge. Have a nice day

[@sykamreddy417]

Very well explained thank you ..

[@LewisMoten]

If you use procedures, you can also pass in a pepper value that is stored outside of the database.

[@eieihlaing2904]

Thanks you very much

[@djuka970]

What about LIKE and ORDER BY using encrypted columns?

[@KamleshKumar-po4qr]

Where can I find this feature in MySQL database?

[@nguyentiendung6596]

Tom, when I set the type of user and password is varchar(), there is an error: Incorrect string value for columm user at row 1
How to fix it ?

[@jadenyjteng5740]

change it to varbinary()

[@youssefdirani]

why not encrypt the salt and decrypt whenever needed (you may use the same key or another.)
BTW other comments are interesting.

[@GHhurrduurr]

I get blob, but when I add cast as char it doesn't work...

[@ravisaxena1599]

You have really explained well I would appreciate it and I have one question is if the password is same, and we are using salt so is this mean every salt must be unique key values because if its same it will give the same encryption, right?

[@yassinmanita]

as i was watching this video i had the same question but there's an easy fix for that as the username is already unique u would use that as your salt

[@Alex-mp1cs]

Sucks that the videos is unclear. But still a good lesson.

[@RYALgt]

Gracias amigo.

[@iyyappanaeyil-qt2lg]

I can't see clear video beacuse no clear in words

[@sameershaikh-yh8hk]

Hey add some more video in mysql

[@i.o4766]

let's say you have a database of over 100 usernames and passwords. Is there a way we can apply encryption to everything in the column as opposed to individual one by one?

[@svens3722]

update usernames set password=encrypt(password) where id > 0;

[@i.o4766]

@@svens3722 Thanks.

[@anirudhrana489]

@@svens3722 how to decrypt this please tell???

[@svens3722]

@@anirudhrana489 just use the aes_decrypt function

[@edcarloorgel]

You should use hash or sha2 instead of encryption

[@erictheawesomest]

you could probably use both by encrypting the hash

[@svens3722]

the video title says encrpytion, not hashing. he just want to explain encryption in this enviroment. not safety or anything else.