If you want a good introduction to FIELDPROC encryption, Townsend Security just published an eBook that is a great tool for getting started.
IBM i Encryption with FieldProc: Protecting Data at Rest provides useful information about FIELDPROC exit point architecture and the kinds of features and limitations to look for in any FIELDPROC-based encryption product. Of course, there is marketing information interspersed but it is easily identifiable and, in my opinion, doesn’t detract from the information provided.
Getting encryption right — especially the key management part — is a much more complex undertaking than most people first realize. That’s why I wouldn’t recommend the average IT shop attempt an in-house implementation of FIELDPROC encryption. But you do need to understand it a basic level.
For those that are considering writing in-house FIELDPROC exit point programs, this eBook is as good a place to start as any. Don’t expect to find all the information you need to write your own FIELDPROC-based solution though. A book doing a thorough job of this would require at least a hundred pages! (If you want more information about key management, the eBook contains a link to a free whitepaper that I (blush) co-authored with Patrick Townsend.)
Other important topics discussed in the eBook:
- Encryption performance in general and FIELDPROC encryption in particular, which is big concern for many if not most shops. The eBook provides insight to the system level encryption implementation and provides some hints for getting better performance with any FIELDPROC solution.
- FIELDPROC encryption limitations. For example, issues related to join logical files created with DDS and encrypting indexes. Some of the issues can be addressed and some can’t. Good information whether you are interested in the Townsend solution or not.
- Additional security controls. For example, when data is encrypted, how do you determine who should be allowed to decrypt it? Does it make sense to solely rely on object level security or should you have another layer? The eBook gives guidance on how to address these questions.
All in all, if you want a high-level introduction to FIELDPROC encryption, I think this eBook is a great tool for getting started. Check it out.
