A Django model field that encrypt your data when save to and decrypt when get from database. It keeps data always encrypted in database. Base on symmetric encryption, it support query the origin text and return encrypted objects in Django.

• Use settings.SECRET_KEY as secret key default or anyelse which length >= 32
• Support CharField、TextField、IntegerField、EmailField
• Support Django ORM's get()、filter() query method
• Use AES-256-ECB algorithm
• Support PostgreSQL and MySQL database
• Support Django model field db_index and unique attributes

pip install django-mirage-field

from mirage import fields
class TestModel(models.Model):
    phone = fields.EncryptedIntegerField()

obj = TestModel.objects.get(phone=18866677777)
obj.id          # 123
obj.phone       # 18866677777
type(obj.phone) # int

database=# select * from testmodel where id = 123;
         id          |           phone
---------------------+--------------------------
 123 | -bYijegsEDrmS1s7ilnspA==

from mirage.crypto import Crypto
c = Crypto(key="")                      # key is optional, default will use settings.SECRET_KEY
c.encrypt('18866677777')                # -bYijegsEDrmS1s7ilnspA==
c.decrypt('-bYijegsEDrmS1s7ilnspA==')   # 18866677777

You can use the settings.SECRET_KEY as default key, if you want custom another key for mirage, set the MIRAGE_SECRET_KEY in settings.

Mirage will get the settings.MIRAGE_SECRET_KEY first, if not set, mirage will get the settings.SECRET_KEY.

1. EncryptedTextField
2. EncryptedCharField
3. EncryptedEmailField
4. EncryptedIntegerField

AddmiragetoINSTALLED_APPS

add app_name,model_name,field_name in migrations.RunPython

from mirage.tools import Migrator

migrations.RunPython(Migrator("app_name", "model_name", "field_name").encrypt, reverse_code=Migrator("app_name", 'model_name', 'field_name').decrypt),

Options:

• --app
• --model
• --field
• --method (optional: encrypt, decrypt, encrypt_to, decrypt_to, copy_to)
• --tofield (need when use encryt_to, decrypt_to, copy_to method)

Optional options:

• --offset ("select * from xxx where id > offset")
• --total ("select * from xxx order by id limit total")
• --limit: set the query count in every update, default is 1000, if you set -1, mirage will query all rows one time to update.

Examples

./manage.py mirage --app=yourapp --model=testmodel --field=address --method=encrypt --offset=2000000 --total=3000000

./manage.py mirage --app=yourapp --model=testmodel --field=address --method=encrypt_to --tofield=encrypted_address

from mirage import exceptions

1. EncryptedFieldException

Migrate data: 6000,000 columns takes 40 minutes, Average 1 column/2.5ms

Only encrypt/decrypt: Average 1 value/ms

• Java