[lnkForumImage]
TotalShareware - Download Free Software
Confronta i prezzi di migliaia di prodotti.
Asp Forum
 Home | Login | Register | Search 


 

Forums >

comp.lang.ruby

encryption (of credit cards

Joe Van Dyk

7/31/2007 9:32:00 AM

http://monkeycharger.googlecode.com/svn/trunk/app/models/cred...

Ignore the fact that it's a ActiveRecord model and tell me if the
encryption that I'm using for encrypting the credit card numbers is
reasonable. Did I screw anything up?

What would you change? I imagine I could generalize out the
encryption bits, right?

Thanks,
Joe
1 Answer

Joe Van Dyk

7/31/2007 10:54:00 AM

0

On Jul 31, 2:32 am, Joe Van Dyk <joevan...@gmail.com> wrote:
> http://monkeycharger.googlecode.com/svn/trunk/app/models/cred...
>
> Ignore the fact that it's a ActiveRecord model and tell me if the
> encryption that I'm using for encrypting the credit card numbers is
> reasonable. Did I screw anything up?
>
> What would you change? I imagine I could generalize out the
> encryption bits, right?

One alternative I came up with is to use some combination of a unique
user id, the credit card's cvv, and a secret key on the server for
encrypting the credit card number. So, whenever you wanted to
authorize a card, you had to provide the unique user id and the CVV
for the card. I figure that would make a bit safer.