Re: SQL-Server and Content encryption

From: Reiner (Reiner.proels@laposte.net)
Date: 04/24/03

  • Next message: Amar Dhadli: "SQL Server service 'losing' logon password'" 
    From: "Reiner" <Reiner.proels@laposte.net>
Date: Thu, 24 Apr 2003 01:27:48 -0700

    Thanks (to all)!
    I will check to see what I will use.

    Reiner

    >-----Originalnachricht-----
    >Yup, this scheme would work if only a secure authority
    could check out the
    >decrypt key. In this case the UDF stores the key.
    >
    >"Andrew J. Kelly" <ajkellynospam@attbi.com> wrote in
    message
    >news:#CN#cZaCDHA.1304@TK2MSFTNGP11.phx.gbl...
    >> That will not do what he requested. There would be
    nothing to stop the
    >sa
    >> from calling the udf and decrypting the data.
    >>
    >> --
    >>
    >> Andrew J. Kelly
    >> SQL Server MVP
    >>
    >>
    >> "Madhu" <madhu@visionencompass.com> wrote in message
    >> news:O800dJaCDHA.2376@TK2MSFTNGP10.phx.gbl...
    >> > Hi,
    >> >
    >> > U can try this. (only in Sql server 2000)
    >> >
    >> > 1. Have a encryption api from third party vendor (ex:
    activecrypt.com)
    >> > 2. Map the dll to sql server using extended stored
    procedure
    >> > 3. Write a user-defined function to call the encrypt
    and decrypt
    >> functions.
    >> > Use some your own password (which are exposed in API)
    >> > 4. Rename all tables to <table_name_org> (could be
    anything)
    >> > 5. Create a view as original table name
    >> > 6. Write a triggers to view to insert/update/delete
    the actual table
    >> >
    >> > If you have any problem revert back.
    >> >
    >> > Bye,
    >> > Madhu
    >> >
    >> > "Andrew J. Kelly" <ajkellynospam@attbi.com> wrote in
    message
    >> > news:uR$SS#ZCDHA.392@TK2MSFTNGP12.phx.gbl...
    >> > > SQL Server does not have any encryption features
    built in like that.
    >If
    >> > you
    >> > > really don't want anyone (even sa) to be able to
    decrypt it then you
    >> must
    >> > do
    >> > > the encryption and decryption in the application.
    Then sql server is
    >> just
    >> > a
    >> > > data store as it is intended and unless someone
    else has this
    >decryption
    >> > > scheme they won't be able to interpret the data
    even if they can read
    >> it.
    >> > >
    >> > > --
    >> > >
    >> > > Andrew J. Kelly
    >> > > SQL Server MVP
    >> > >
    >> > >
    >> > > "Reiner" <Reiner.proels@laposte.net> wrote in
    message
    >> > > news:02b301c3099b$f4f9ac50$2f01280a@phx.gbl...
    >> > > > Hello,
    >> > > >
    >> > > > is there any possibility to hide the datas stored
    in the
    >> > > > database even for an administrator (encryption).
    So only a
    >> > > > special application with a build in password /
    key can
    >> > > > read the data stored in the SQL-Server database?
    >> > > >
    >> > > > Thanks
    >> > > >
    >> > > > Reiner
    >> > >
    >> > >
    >> >
    >> >
    >>
    >>
    >
    >
    >.
    >

  • Next message: Amar Dhadli: "SQL Server service 'losing' logon password'"

    Relevant Pages

    • Re: SQL Server 2000 / 2005 Encryption
      ... to encrypt your SSL connections will be different. ... SQL Server can generate its own self-signed certificates though, and that should make the SSL encryption/connectivity easier for you. ... Excel does not know how to decrypt data stored in SQL Server 2005 in encrypted form. ...
      (microsoft.public.sqlserver.security)
    • Re: Encrypting & Decrypting
      ... > now i have learnt how to decrypt form google. ... >>Object encryption in sql server is really more object ... >>>>Mark Broadbent mcse+i, mcdba ...
      (microsoft.public.sqlserver.security)
    • Re: managing application role passwords without hard-coding them into applications
      ... app, authenticating as the person, to select the password. ... internally decrypt the password then switch to the application role. ... > SQL Server database), for which only the application has ... > being hard coded into the app (ie preventing developers ...
      (microsoft.public.sqlserver.security)
    • Re: Decryption of SQL Server Login pwd
      ... You are not supposed to be able to decrypt it. ... Hal Berenson, SQL Server MVP ... True Mountain Group LLC ... "Hartono" wrote in message ...
      (microsoft.public.sqlserver.security)
    • Re: Decrypt Stored Proc ...
      ... SQL Server doesn't provide any built-in mechanism to decrypt encrypted ... stored procedures. ... tools/code to decrypt the encrypted procedures. ...
      (microsoft.public.sqlserver.programming)
    • Quantcast