MySQL敏感数据进行加密的几种方法小结

CREATE TABLE encrypted_data (
    id INT AUTO_INCREMENT PRIMARY KEY,
    encrypted_text BLOB
);

SET @sensitive_text = 'Sensitive Information';
SET @encryption_key = 'MySecretKey';
INSERT INTO encrypted_data (encrypted_text)
VALUES (AES_ENCRYPT(@sensitive_text, @encryption_key));

SELECT AES_DECRYPT(encrypted_text, @encryption_key)
FROM encrypted_data;

CREATE TABLE users (
    id INT AUTO_INCREMENT PRIMARY KEY,
    username VARCHAR(50),
    password_hash VARCHAR(32)
);

SET @password = 'UserPassword';
SET @password_hash = MD5(@password);
INSERT INTO users (username, password_hash)
VALUES ('User', @password_hash);

SET @input_password = 'UserPassword';
SET @stored_password_hash = (SELECT password_hash FROM users WHERE username = 'User');
IF MD5(@input_password) = @stored_password_hash THEN
    SELECT 'Password is correct';
ELSE
    SELECT 'Password is incorrect';
END IF;

[mysqld]
early-plugin - load = keyring_file.so
keyring_file_data = /path/to/keyring/file

CREATE TABLESPACE encrypted_tablespace
ADD DATAFILE 'encrypted_file.ibd'
ENCRYPTION = 'Y'
KEY_BLOCK_SIZE = 16;

from cryptography.fernet import Fernet
import mysql.connector

# 生成密钥
key = Fernet.generate_key()
cipher_suite = Fernet(key)

# 要加密的敏感数据
sensitive_data = "Confidential Data".encode('utf - 8')
encrypted_data = cipher_suite.encrypt(sensitive_data)

# 连接到MySQL数据库
mydb = mysql.connector.connect(
    host="localhost",
    user="your_user",
    password="your_password",
    database="your_database"
)
mycursor = mydb.cursor()

# 创建表来存储加密数据
mycursor.execute("CREATE TABLE if not exists encrypted_data (id INT AUTO_INCREMENT PRIMARY KEY, encrypted_text BLOB)")
# 插入加密后的数据
mycursor.execute("INSERT INTO encrypted_data (encrypted_text) VALUES (%s)", (encrypted_data,))
mydb.commit()

# 读取加密数据并解密
mycursor.execute("SELECT encrypted_text FROM encrypted_data")
result = mycursor.fetchone()
decrypted_data = cipher_suite.decrypt(result[0]).decode('utf - 8')
print(decrypted_data)