RE: Encrypting Cached data

["Ig Vermaak" <Ig.Vermaak () namitech com>]

Hi Yousef,

Have you considered Hardware Security Modules? This will not only take
care of the "key in cache" problem - but also greatly enhance the
transaction speed. If you want more info mail me :)

Regards
Ig Vermaak


-----Original Message-----
From: Yousef Syed [mailto:yousef.syed () gmail com] 
Sent: 01 December 2005 09:20 PM
To: Web Application Security
Subject: Encrypting Cached data

Hi,
Is it possible to encrypt data stored in the cache of a Web Server or
Application server?

We'd like to use caching for performance reasons, but don't want
secure data to be viewable if the server is compromised.

What is the best way to do this?

Thanx,
ys

--
Yousef Syed
"One senior official said the consultancy "doesn't have the greatest
of reputations among civil servants. They come and state the bleeding
obvious using Powerpoint"."