← Back to Knowledge Base

KB #240005: Cannot Perform Case-Insensitive Compare on Encrypted Strings Using APIs

⏱️ 2 min read
Type: Tip
Summary:
This article explains why you cannot do a case-insensitive compare on encrypted strings and suggests a work-around.
Additional Information:
Note: This applies only if you are using the optional APIs. This does not apply if you are using whole-database encryption, which is completely transparent.The encryption process transforms strings into random binary buffers. For example, take the following plaintext strings:

string1 = "David Byrne" 
string2 = "DAVID BYRNE"

In order to do a case-insensitive compare, the program simply converts them both to upper case. E.g.,

if upper(string1) = upper(string2)

This might actually happen automatically, depending on your platform and program settings.

In memory, these strings are completely different. For instance, uppercase ‘A’ is represented internally as hex 41, while lowercase ‘a’ is hex 61. Therefore, when encrypted these strings become completely different values. For example, string1 might encrypt to:

"hd@Weo%32eR"

while string2 might encrypt to:

"(12u9u$jHc*"

Clearly, converting them to uppercase in order to compare them would have no meaning.

If you wish to do case insensitive compares you must do one of two things:

  1. Always store the values in the same case, i.e., always upper, lower, or proper (first letter of each word).
  2. Decrypt before comparing

 

Was this article helpful?

Related Articles

KB #240068: How to run the Support Diagnostic

Type: Information Summary: This article describes how to download and run the NetLib Support Diagnostic,…

KB #240103: Log Shipping with Encryptionizer (driver v2010.201.10 and later)

Type: Information Summary: Encryptionizer for SQL FIPS 140-2 Validated supports Log shipping using an AES…

KB #240134: Error message: The current license has failed validation.

Type: Information. Summary: When launching the Main Menu or “License Management” dialog , you receive…

Still need help?

Our support team is here to assist you.

NetLib Security
AI Assistant · Online
Hi! I'm the NetLib Security assistant. I can answer questions about our encryption solutions, HIPAA compliance, Encryptionizer, and more. How can I help you today?