RE: Decryption Performance

From: Aaron (anonymous_at_discussions.microsoft.com)
Date: 04/26/04 

Date: Mon, 26 Apr 2004 10:16:07 -0700

Thanks for the replies, Alek and Chris.

First, off, Alek you are correct, I misstated our encryption method. I coded off of an existing encryption method created by another developer. When I posted the question, I did not have the source code and could not verify the encryption method, and I incorrectly called it a SH1 hash algorithm. We are using the DESCryptoServiceProvider right now, and could possibly use the TripleDESCryptoServiceProvider. We are coding in VB.NET. Your suggestions on ways to improve performance were what i was looking for.

Chris for your questions...our software can operate as client/server or standalone. However, the software is sold to our customers, who install the application at their sites, so we have no control over them. They may load the database on a server machine, with other SQL Server databases within their company. We do not wish their DB admins to be able to get at our data. We have found that the only way to secure a SQL Server DB in this circumstance is to install our own instance of SQL Server, which would mean we would be responsible to patch SQL Server as they come out, which may not be a desirable option for us (but we are still researching this possibility).

Thanks for the suggestions.