Re: Encrypting Data in SQL 2000

What about Microsoft's Crypto API?

Steve

"Arnie Rowland" <arnie@xxxxxxxx> wrote in message
news:e8qenSrpGHA.3324@xxxxxxxxxxxxxxxxxxxxxxx
Very limited.

If using a .NET applicaiton, there is a rich encryption library that could
be used at the application level to encrypt data before it is stored in
the server, and decrypt it after if is retreived.

And there are several third party 'Add-ins' to allow encryption via
extended procedures.

A very crude 'hiding (and generally ineffective) scheme would be to use
one of the checksum() functions and do a one-way process. You couldn't
'decrypt' it but you could use a comparison to verify if an input value
matches.

As far as I know, the application level method is the only way to keep a
determined DBA (or Admin) from being able to access the encrypted data AND
the means to decrypt it. (But then, the question is "Is that a wise
decision?, Are you feeling lucky? Go ahead, make my ..."

--
Arnie Rowland*
"To be successful, your heart must accompany your knowledge."



"Steven" <Lazans@xxxxxxxxx> wrote in message
news:eDdtTMrpGHA.4812@xxxxxxxxxxxxxxxxxxxxxxx
What is the recommended way to store data in SQL Server 2000 encrypted so
not even DBA can see the values? I know SQL 2005 has encryption at the
row level, but what are my options in SQL 2000?

Thank you,

Steve





.

Relevant Pages

  • Re: Encrypting & Decrypting
    ... Object encryption in sql server is really more object obfuscation rather ... and find tools that can decrypt procedures. ...
    (microsoft.public.sqlserver.security)
  • Re: Encrypting & Decrypting
    ... now i have learnt how to decrypt form google. ... >Object encryption in sql server is really more object ... The SQL ...
    (microsoft.public.sqlserver.security)
  • Re: Encrypting Data in SQL 2000
    ... Arnie Rowland* ... and decrypt it after if is retreived. ... And there are several third party 'Add-ins' to allow encryption via ... but what are my options in SQL 2000? ...
    (microsoft.public.sqlserver.security)
  • Re: Encrypting Data
    ... I need to encrypt sensative data in a SQL db like ssn, ... SymmetricAlgorithm using DES to encrypt and decrypt the data. ... The current standard encryption algorithm of choice is AES. ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: usb memory sticks
    ... however it is subject to known-plaintext attacks* (Putting ... A method where the encryption key (not necessarily the ... actual password used to encrypt data in the case of ZIP) can be recovered by ... the above comments are probably an illegal circumvension ...
    (uk.comp.homebuilt)