Re: store user password in sql server

From: Sue Hoegemeier (Sue_H@nomail.please)
Date: 06/28/02


From: Sue Hoegemeier <Sue_H@nomail.please>
Date: Fri, 28 Jun 2002 08:41:38 -0600


Nothing built in. You can write your own using the Crypto
API or some other encryption libraries. There is a link to
a sample xp that does encryption and some additional
information on encryption alternatives in this FAQ:
http://www.mssqlserver.com/faq/general-encrypt.asp

You can also find some third party links in the Encryption
entry at SQLSecurity.com:
http://www.sqlsecurity.com/DesktopDefault.aspx?tabindex=1&tabid=2

-Sue

On Fri, 28 Jun 2002 10:13:56 -0400, "Helen Sun"
<xsun@xsun.net> wrote:

>Hi, all,
>
>A newbie question:
>
>How do we store user password in a sql server database without comprising the security. Is there a datatype or built-in encryption/decryption mechanism in sql server?
>
>Thanks in advance!
>
>Helen
>
>Helen (Xiangqing) Sun, Ph.D.
>Sr. Web Application Developer
>Phone: 419-215-8458
>www.xsun.net



Relevant Pages

  • Re: SQL or Access DB
    ... As far as encryption goes though... ... with Sql Server you can use SQL DMO and encrypt your stored procedures ... installation - Security was absolutely critical and in most instances, ... > then we create a nice gui around this database and sell it to automotive ...
    (microsoft.public.dotnet.languages.vb)
  • RE: Views
    ... you must understand that SQL Server 2000 does not support ... database data encryption as such. ... following method in the KB below to enhance the security. ... Microsoft is providing this information as a convenience to you. ...
    (microsoft.public.sqlserver.programming)
  • Re: Protecting database from administrators
    ... >> there is no encryption while at rest it must still be secure. ... >> All the security MS has offered is weak. ... If it is attached to SQL Server ...
    (microsoft.public.sqlserver.security)
  • Re: MSDE Security (aka users looking at my apps database)
    ... > I have been called in more than once to untangle all sorts of developer ... let's think about a genious tool, RAC by SQL Server MVP Thanh Ngo.. ... even if SQL Server encryption has been defeated... ... think to privacy protection for sensible data... ...
    (microsoft.public.sqlserver.msde)
  • Re: is WITH ENCRYPTION now safe in SQL2005?
    ... There are very dissenting opinions on that in the SQL Server community. ... you are in this situation you are quite happy that you can decrypt the ... How would a safe encryption method be implemented? ... private key, SQL Server must have access to that private key. ...
    (comp.databases.ms-sqlserver)