Re: Data encryption

From: James Hunter Ross (jhr@delta.net)
Date: 10/30/02 

From: "James Hunter Ross" <jhr@delta.net>
Date: Wed, 30 Oct 2002 10:14:27 -0800

If you could encrypt/decrypt with a SQL Server function, the data might not
be as secure as you would like.

But, if you encrypt in code, then querying for credit card numbers requires
that you encrypt the search criteria (number you are looking for) before
submitting SQL. Encrypting in code helps you hide and control the use of
the alogorythm.

It's a tough call, and depends on other things such how "open" is the
database to users, etc. I don't know how folks typically do this though.

James

Relevant Pages

  • RE: local admin account password
    ... > encrypt the database and create alerts in the event of unsuccessful ... >> no more recovery console and don't think cached logins will work. ... >> The DB file would be encrypted with EFS so only the limited user SQL ... >> itself doesn't really need to be secure as the authentication is based ...
    (Focus-Microsoft)
  • RE: local admin account password
    ... > Subject: local admin account password ... > secure it. ... > and then encrypt the file (PGP or something like it with the private ...
    (Focus-Microsoft)
  • Re: How to convert a SecureString into an encrypted String in a se
    ... secure string and into a byte array looked a little weird to me, ... You can then either convert that to a .NET string (not a good idea if the ... Note that you can encrypt your SQL network traffic on the wire if you are ... planning to encrypt the passwords using the symmetric Rijndael algorithm, ...
    (microsoft.public.dotnet.security)
  • Re: My own little replacement for the Unix crypt
    ... >> of questionable origin I decided to write my own. ... > I have no idea if it's secure because I don't know what it's for. ... simple program that would encrypt data a whole lot ... rand(). ...
    (sci.crypt)
  • Re: IBM Touts Integrated Encryption
    ... signature does ... stealing a file with the private key. ... hardware-based scheme to encrypt does indeed secure ...
    (sci.crypt)