Re: Encrypting Data in SQL 2000



What about Microsoft's Crypto API?

Steve

"Arnie Rowland" <arnie@xxxxxxxx> wrote in message
news:e8qenSrpGHA.3324@xxxxxxxxxxxxxxxxxxxxxxx
Very limited.

If using a .NET applicaiton, there is a rich encryption library that could
be used at the application level to encrypt data before it is stored in
the server, and decrypt it after if is retreived.

And there are several third party 'Add-ins' to allow encryption via
extended procedures.

A very crude 'hiding (and generally ineffective) scheme would be to use
one of the checksum() functions and do a one-way process. You couldn't
'decrypt' it but you could use a comparison to verify if an input value
matches.

As far as I know, the application level method is the only way to keep a
determined DBA (or Admin) from being able to access the encrypted data AND
the means to decrypt it. (But then, the question is "Is that a wise
decision?, Are you feeling lucky? Go ahead, make my ..."

--
Arnie Rowland*
"To be successful, your heart must accompany your knowledge."



"Steven" <Lazans@xxxxxxxxx> wrote in message
news:eDdtTMrpGHA.4812@xxxxxxxxxxxxxxxxxxxxxxx
What is the recommended way to store data in SQL Server 2000 encrypted so
not even DBA can see the values? I know SQL 2005 has encryption at the
row level, but what are my options in SQL 2000?

Thank you,

Steve





.



Relevant Pages

  • Re: Encrypting & Decrypting
    ... Object encryption in sql server is really more object obfuscation rather ... and find tools that can decrypt procedures. ...
    (microsoft.public.sqlserver.security)
  • Re: Encrypting & Decrypting
    ... now i have learnt how to decrypt form google. ... >Object encryption in sql server is really more object ... The SQL ...
    (microsoft.public.sqlserver.security)
  • Re: Encrypting Data in SQL 2000
    ... Arnie Rowland* ... and decrypt it after if is retreived. ... And there are several third party 'Add-ins' to allow encryption via ... but what are my options in SQL 2000? ...
    (microsoft.public.sqlserver.security)
  • Re: British ISPs Block Wikipedia
    ... you visit a secure web site. ... The basis of such encryption is that you can have a pair of keys such ... that the key you encrypt with cannot decrypt the result - only the ... and they can use it to encrypt data that only I am able to ...
    (uk.legal)
  • Re: British ISPs Block Wikipedia
    ... The whole idea is that you *think* they can't decrypt it. ... you visit a secure web site. ... The basis of such encryption is that you can have a pair of keys such ... and they can use it to encrypt data that only I am able to ...
    (uk.legal)