The Security Analysis of MySQL's Encryption Functions

Abstract

The popular database MySQL provides many cryptographic encryption functions to protect the privacy of its data storage. In this paper, we investigate the inner principle and security of encryption functions in three main categories and indicate that most of them are not secure as MySQL has claimed in the official manual document. By exploiting the vulnerability of these functions, we present some practical and effective attacks explicitly. Moreover, we also give some pieces of solution and suggestion to enhance the security of these functions in the application.