SQL stored procedures encryption strength

From: Bénoni MARTIN (Benoni.MARTIN_at_libertis.ga)
Date: 11/11/04

  • Next message: Ghaith Nasrawi: "RE: Firewall and VLAN security design" 
    Date: Thu, 11 Nov 2004 20:03:46 +0100
To: <security-basics@securityfocus.com>

    Hi list !

    I was wondering how secure is the encryption used for stored procedures in SQL Server 2000. I mean, when I create a procedure like this:

            create procedure dbo.aed_hd_ok_check
                    @input char(64)
                    ...
            with encryption
            as
            Begin
                    ...
            end

    the procedure becomes then encrypted, and even the sa account cannot see the source after that.

    But no way to find in SQL docs which algorithm is used, and if there are ways to breack it down ...

    Anybody knows about this ?

    Thanks !

  • Next message: Ghaith Nasrawi: "RE: Firewall and VLAN security design"

    Relevant Pages

    • Re: SQL or Access DB
      ... As far as encryption goes though... ... with Sql Server you can use SQL DMO and encrypt your stored procedures ... installation - Security was absolutely critical and in most instances, ... > then we create a nice gui around this database and sell it to automotive ...
      (microsoft.public.dotnet.languages.vb)
    • Re: Protecting database from administrators
      ... there is no encryption while at rest it must still be secure. ... All the security MS has offered is weak. ... If it is attached to SQL Server on ...
      (microsoft.public.sqlserver.security)
    • Re: Copying encrypted stored procedures.
      ... using the 'WITH ENCRYPTION' clause. ... how do I copy these stored procedures from development ... to their target SQL server environment in an encrypted state? ...
      (comp.databases.ms-sqlserver)
    • Re: Securing SQL Stored procedures
      ... It seems most of the .NET framework is based on obfuscation and encryption ... to those wanting to secure code as paramount importance) ... >>Is there any further way to secure stored procedures, ...
      (microsoft.public.sqlserver.msde)
    • Re: Securing SQL Stored procedures
      ... It seems most of the .NET framework is based on obfuscation and encryption ... to those wanting to secure code as paramount importance) ... >>Is there any further way to secure stored procedures, ...
      (microsoft.public.sqlserver)
    Loading