[Advanced-java] How to keep private fields encrypted and secure?

[Prashant Parashar]

Hi,
I want to know what are the best practices to keep the sensitive 
fields(such as Social Security Number)  in the database secure. Although 
there are multiple methods I am curious to know-

How and where should the key be stored? What if the key itself is cracked? 

Is there a way key storage is not required?
What if key is accidentally lost/deleted?  Keeping password as key is not 
an option as passwords generally keeps on changing.

Thanks,
Prashant Parashar




--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
This is a PRIVATE message. If you are not the intended recipient, please 
delete without copying and kindly advise us by e-mail of the mistake in 
delivery. NOTE: Regardless of content, this e-mail shall not operate to 
bind CSC to any order or other contract unless pursuant to explicit 
written agreement or government initiative expressly permitting the use of 
e-mail for such purpose.
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
-------------- next part --------------
An HTML attachment was scrubbed...
URL: /lists/advanced-java/attachments/20070212/582e6c84/attachment.html