DataBase encryption in Hibernate

Question

How can encrypt the data base fields when using the hibernate?

We have developed the product some of the clients are using that application Some clients is asking about the data base encryption Is there any possible to encrypt the data in application level with out more changes in the code.

Please give me the suggestion as soon as possible.

possible duplicate of [DataBase encryption in Hibernate](http://stackoverflow.com/questions/5619417/database-encryption-in-hibernate) — axtavt, Apr 11 '11 at 12:45

score 13 · Answer 1 · answered Nov 26 '12 at 22:52

13

Try this:

Put an attribute in your entity:

private byte[]  encryptedBody;

Use this getter and setters:

@Column(columnDefinition= "LONGBLOB", name="encryptedBody") 
@ColumnTransformer(
  read="AES_DECRYPT(encryptedBody, 'yourkey')", 
  write="AES_ENCRYPT(?, 'yourkey')")
public byte[]  getEncryptedBody() {
    return encryptedBody;
}

public void setEncryptedBody(byte[]  encryptedBody) {
    this.encryptedBody = encryptedBody;
}

And then when you retrive the column use:

private final Charset UTF8_CHARSET = Charset.forName("UTF-8");

String decodeUTF8(byte[] bytes) {
    return new String(bytes, UTF8_CHARSET);
}

String s = decodeUTF8(entity.getEncryptedBody());

BEWARE: AES_DECRYPT and AES_ENCRYPT belong to MySQL. If you have a different data base engine find similar functions.

Hope this helps.

answered Nov 26 '12 at 22:52

Andrés Canavesi

2,164
20
21

2

Tip for cross DB useage - you could create stored procs (or functions) that handles the encryption and decryption for you, and call those via the @ColumnTransformer annotation. So when you have to port to a other DB, you just need to implement those in the DB itself, and bob is your uncle. – demaniak Nov 14 '13 at 14:09
IMHO this is not how encryption should work. The basic idea is that having only access to DB you would not be able to decrypt the value. Then what is the point if there is a built-in or stored procedure to achieve that? I mean normally the client should be responsible for encrypting and decrypting data... – Zilvinas May 13 '16 at 00:28
that's solution works perfectly. but are this information converted remotely and send back encrypted, or the encryption will be on hibernate side?(so local to the java process?) – Matt Vegas Feb 28 '19 at 07:03

Vlad Mihalcea · Answer 2 · 2021-01-08T16:29:30.767

You can use the @ColumnTransformer annotation like this:

@ColumnTransformer(
    read =  "pgp_sym_decrypt(" +
            "    storage, " +
            "    current_setting('encrypt.key')" +
            ")",
    write = "pgp_sym_encrypt( " +
            "    ?, " +
            "    current_setting('encrypt.key')" +
            ") "
)
@Column(columnDefinition = "bytea")
private String storage;

This way, Hibernate will be able to encrypt the entity attribute when you persist or merge it and decrypt it when you read the entity.

score 3 · Answer 3 · answered Apr 11 '11 at 13:06

3

I think that you are looking for column transformers. You can find how to do it in the Hibernate reference:

http://docs.jboss.org/hibernate/core/3.6/reference/en-US/html/mapping.html#mapping-column-read-and-write

I hope that helps!

answered Apr 11 '11 at 13:06

Edwin Dalorzo

76,803
25
144
205

score 1 · Answer 4 · answered May 14 '15 at 17:04

1

You could use jasypt. It has an Hibernate integration that allows you to encrypt properties while saving (and decrypt while loading).

http://www.jasypt.org/hibernate.html

answered May 14 '15 at 17:04

Ralph

118,862
56
287
383

DataBase encryption in Hibernate

4 Answers4

Linked

Related