I am looking for some advice on encryption and security.
We are planning to store encyrpted credit card numbers on our sql db using the Rijndael algorithm, given the sensitivity of the data, I am concerned about whether it is possible for a hacker to aquire access to the passphrase and saltvalue within the compiled code, i.e. is it possible to decompile an aspx page to gain access to the strings. If this is possible are there any best practices I should follow to mitigate the vunerability. If anyone has any info or can point me in the direction of some good papers I would be really greatful
...
Go to the complete details ...