Re: How many people use DB encryption

From: Brian Lawton (lawton@rdacorp.com)
Date: 08/30/02 

From: "Brian Lawton" <lawton@rdacorp.com>
Date: Thu, 29 Aug 2002 20:07:27 -0400

While I've seen and implemented some encryption on individual fields, I've
not seen nor had any requests for encrypting an entire database. One ward
of warning is performance. Adding the encryption not only adds complexity
in that you need to a layer to encrypt/decrypt the data but also introduces
a performance penalty to your system. IT really boils down to your
requirements...if your clients really truly require it and are willing to
accept the trade-offs, then build it.

--Brian
(Please post all replies to the newsgroup.)

"Todd" <todd.arrington@worldtravel.com> wrote in message
news:b86401c24f0e$2f6156c0$9ae62ecf@tkmsftngxa02...
> Just wondering how many companies are using a true
> database encryption software package to encrypt their
> entire database(tables, objects, etc). I ask this
> because we are thinking about encrypting alot of our
> databases based on customer requests. TIA

Relevant Pages

  • Re: Newbie - Is this Reasonable?
    ... because this hash is stored in the database. ... So you use PKCS5v2 to generate a key hash from a salt and the user's passphrase, then store the salt and the hash in a database. ... are even more critical in database applications because the payoff from tampering with selected fields may be much higher, fields tend to be fixed-length so it's easier to tamper with them in a meaningful way, and databases lend themselves to off-line analysis, so the attacker can marshall more resources and take more time to attack your system. ... You're using a stream cipher for encryption. ...
    (sci.crypt)
  • 2005-Problem restoring database with encrypted columns to diff ser
    ... I need to start encrypting several fields in a database and have been doing ... OPEN MASTER KEY DECRYPTION BY PASSWORD = 'testAppleA3'; ... ALTER MASTER KEY ADD ENCRYPTION BY SERVICE MASTER KEY; ... encryption by certificate test; ...
    (microsoft.public.sqlserver.security)
  • Re: Protecting an Access Database
    ... because I want to make my database more secure. ... I see...So I guess that not even encryption (which I have ... I think Microsoft could have created a built-in encryption function within ...
    (microsoft.public.access.security)
  • Re: FlatFile Encryption using FILESTREAM
    ... If a folder on a domain contains confidential flat files, ... files can be added to a database filegroup and read using FILESTREAM. ... SQL Server ensures data-level consistency between the relational data in the ... "Note that this encryption is made by default when you create ...
    (microsoft.public.sqlserver.server)
  • Re: How to prevent importing tables
    ... why in-built encryption doesn't even matter if they otherwise have ... off-topic but is all to do with security and "extraction". ... > sufficient permission to open the database, ... then they don't even need to decrypt it! ...
    (microsoft.public.access.security)