How to sign data in MySQL database edition safely (reliable time binding)?

Question

I am currently planning a project in which the security of database version data is important. This means: we want to be able to prove that the data in the database has not been softened since it was imported - not a single user changed the value, not a single db administrator entered the database and changed it.

What is the best way to achieve this?

So far I like the idea of ​​best enclosing a database string: I create an MD5 hash of all the fields in the string, and then send it to the signature server with a time stamp ( look at wikipedia ) and save the created signature with the string. From now on, we can prove that no one has changed the line since the creation of this brand.

Any better ideas? And, if you like the idea as much as I do, which timestamp server should I use and how can I access it? Verisign Timestamp Server seems to be used a lot, but I could not find documentation on how to use its "raw", for example. without Microsoft code signing tools, etc.

Thanks!

Answer 1

Time marker servers are usually not free.

Alternatively, you can use HMAC-MD5 (or HMAC-SHA1) and use a password that is known only to an authorized user. The password, of course, is not directly used, it is better through PKCS # 5 or, at least, is hashed by seed. No password can verify or recreate the HMAC-MD5