Hi, can the group think of an easy but fairly robust way to encrypt a .TXT
file that's written to a shared Windows directory?

I want to write a file in Pick (normally we'd just write a CSV) and have our
VB developers import the file into their application. As the information
contains banking information I want to encrypt it. It will be a daily
update file and as it's sitting on the server, there is a security risk.

I was thinking of converting to Hex but I don't think it's secure enough.
I'm not looking for rocket science but is there a better way, taking into
account that other programmers will need to support by encryption? I can't
use Pick's password OCONV facility because the VB developers won't have
access to that algorythm!

Thanks!

What kind and what version of Pick?
Almost all versions, D3, Uni.., Jbase, etc. can access directly to the
database from VB, so you do not need to create the file in Pick and
transfer it, and read it. You only need to teach your VB team to access
Pick. And you have all OCONV, ICONV available from VB.

Hope this help

joseba

I don't really want to do it this way. I want to output a file to a shared
folder but encrypt that data.

The version we're using is mvBase, but we'll be moving onto another at some
point. I don't want to use any specific feature that's unavailable in other
implementations - just a Windows file is all I want.

How about just zipping up with a password and using a zip add-in to read?

Winzip has a free command line add-in which works well for this purpose and
you could call from mvbase.

alternatively, I'm sure there are some command line based encryption stuff
available..

Regards
Simon
"Steve" <hj2khrk2hrjk32 (AT) njskfhhf943f93 (DOT) com> wrote

If you are using D3 there is the U009D use exit. The algorythm is simple
enough to duplicate in VB. I works by using a keyword or seed.

I created a routine in VB years ago that did the translation both ways. It
works by adding the ascii values of the seed in rotation to the ascii value
of the string being encrypted.

Play with it a be, and I'm sure you'll see how it works.

hth

Dale

"Steve" <hj2khrk2hrjk32 (AT) njskfhhf943f93 (DOT) com> wrote

You can use MV.net or PDP.net. They work with almost any version of a
mv database (mvbase also). You can use VB.net or any other .net
program.

joseba

On Mon, 9 Jan 2006 17:25:35 -0000, "Steve"
<hj2khrk2hrjk32 (AT) njskfhhf943f93 (DOT) com> wrote:


Banking information should atleast be in DES3 "salted" encryption,
due to the legality of exposing personal finance information. There is
no easy or robust way to do this. You can find the OpenSSL command
line tool for Linux and Windows and use the example I posted on
PickSource for credit card encryption. You will need to generate a
unique and hard to guess passcode. I wrote my encrypt/decrypt
applications to pass this password on the command line to OpenSSL. I
then encrypted and based64 encoded those applications, with a private
password, so that no one can get to the source and password of the
encrypt/decrypt tools.

Glen

If you don't have D3, ignore the following

There's a user exit 9D that does encryption/decription.

x = (I|O)CONV(seed:@AM:data,'U9D')

Iconv encodes and Oconv decodes.

Make SEED a long (16byte) prime number (or something relatively unique) and
you're in business.

If you have to do the encryption/decription totally from within VB, contact
me off-line.

Mark Brown

"Steve" <hj2khrk2hrjk32 (AT) njskfhhf943f93 (DOT) com> wrote

I wrote an encryption module for my own code which does MV/VB encoding
exactly what you describe. Once in a while I create new algorithms
just to keep it fresh and give whoever uses it new options. You can
use custom keys as a seed and both sides will dynamically use the
proper decryption algorithm, so you can use a random one every time to
thwart the bad guys. It's probably no surprise to our colleagues here
that I branded it NebulaSecure, and also no surprise that I haven't
marketed this product yet, but I use it myself and I'm happy with it.
If you're interested I can package it up and you can be the first
customer. I'll need to look at porting it to mvBASE because I wrote
it over D3, but it's intentionally very generic MV code just to keep
it portable.

HTH
Tony, Nebula R&D
TG@ removethisNebula-RnD.com

"Steve" wrote: