Apex Code Development You need to sign in to do that
Don't have an account?
Eager-2-Learn Encrypting Text, Storing it and then Decrypting It?
Hi,
I found a code snippet that shows how to encrypt and decrypt using a key that is built on the fly but I can't figure out how to have a hard-code key in the code or store the key in SFDC and retrieve it within the same code chunk.
What I am doing is building a small app that will allow users to store website information, user id and passwords but I want only the owner to be able to see the password information. I want it so that even me as an admin permission, not to be able to see the password.
This is the code sample that I referered too:
// Use generateAesKey to generate the private key
Blob cryptoKey = Crypto.generateAesKey(256);
// Generate the data to be encrypted.
Blob data = Blob.valueOf('Test data to encrypted');
// Encrypt the data and have Salesforce.com generate the initialization vector
Blob encryptedData = Crypto.encryptWithManagedIV('AES256', cryptoKey, data);
// Decrypt the data
Blob decryptedData = Crypto.decryptWithManagedIV('AES256', cryptoKey, encryptedData);
.
But if the key is in the apex code, then the admin can grab the key and decode the data anyway.
Well the business rule would be that the admin doesn't do that but I just didn't want the admin to use the application like anyone else would use it and actually see the password. I am building this app that allows users to store passwords for websites or whatever. Idealy my company is not going to allow this but I needed something to build to get me motiviated and learn triggers and apex. If you have any other type of suggested approach I would be glad to here from you.
I figured out how to get it to do what I wanted (see below). I used the key generator that came with the DataLoader. So this is my thought on how to use the code. when the user saves the record I will have the encryption code in an insert trigger. Now here is my new problem. What trigger would I use to execute the decryption code only if the owner of the record is viewing the record? If that is not possible is there a way to add a Decript button on the page layout and have it execute the decryption code and show the password in a dialog box?
Actually in stead of storing the key in the code I would like to figure out how to store it in Custom Settings and be able to retrieve the value within Apex?
// Use generateAesKey to generate the private key
//Blob cryptoKey = Crypto.generateAesKey(256);
Blob cryptoKey = Blob.valueOf('380db410e8b11fa9');
// Generate the data to be encrypted.
Blob data = Blob.valueOf('Test data to encrypted');
// Encrypt the data and have Salesforce.com generate the initialization vector
Blob encryptedData = Crypto.encryptWithManagedIV('AES128', cryptoKey, data);
// Decrypt the data
Blob decryptedData = Crypto.decryptWithManagedIV('AES128', cryptoKey, encryptedData);
String decryptedString = decryptedData.toString();
System.debug('ZZZ - Encrypt ' + encryptedData.toString());
System.debug('ZZZ - Decrypt: ' + decryptedString);