Problem - Kevin Tafuro

database does not support binary strings. You want to avoid growing the message
itself (sometimes database fields have length limits) and thus want to avoid encoding
binary data into a representation like base64.
Solution
Encrypt the data using a stream cipher (or a block cipher in a streaming mode). Do
so in such a way that you map each byte of output to a byte in the valid character set.
For example, let’s say that your character set is the 64 characters consisting of all
uppercase and lowercase letters, the 10 numerical digits, the space, and the period.
For each character, do the following:
1. Map the input character to a number from 0 to 63.
2. Take a byte of output from the stream cipher and reduce it modulo 64.
3. Add the random byte and the character, reducing the result modulo 64.
4. The result will be a value from 0 to 63. Map it back into the desired character
set.
Decryption is done with exactly the same process.
See Recipe 5.2 for a discussion of picking a streaming cipher solution. Generally, we
recommend using AES in CTR mode or the SNOW 2.0 stream cipher.
Discussion
If your character set is an 8-bit quantity per character (e.g., some subset of ASCII
instead of Unicode or something like that), the following code will work:
typedef struct {
unsigned char *cset;
int csetlen;
unsigned char reverse[256];
unsigned char maxvalid;
} ENCMAP;
#define decrypt_within_charset encrypt_within_charset
void setup_charset_map(ENCMAP *s, unsigned char *charset, int csetlen) {
int i;
s->cset = charset;
s->csetlen = csetlen;
for (i = 0; i < 256; i++) s->reverse[i] = -1;
for (i = 0; i < csetlen; i++) s->reverse[charset[i]] = i;
s->maxvalid = 255 - (256 % csetlen);
}
void encrypt_within_charset(ENCMAP *s, unsigned char *in, long inlen,
unsigned char *out, unsigned char (*keystream_byte)( )) {
Encrypting in a Single Reduced Character Set | 147
This is the Title of the Book, eMatter Edition
Copyright © 2007 O’Reilly & Associates, Inc. All rights reserved.