Re: Two certificates sharing the same symmetric key

You CAN encrypt a symmetric key using two certificates. If you do that, you
CAN open the key using either certificate.

If you cannot decrypt sym1 using cert2, the problem most likely is in how
you added the cert2 encryption.

Can you post the TSQL code that you have used to create and encrypt sym1
with cert1 and cert2?

Thanks

--
Laurentiu Cristofor [MSFT]
Software Development Engineer
SQL Server Engine
http://blogs.msdn.com/lcris/

This posting is provided "AS IS" with no warranties, and confers no rights.

"Brian Ho" <BrianHo@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:4FFCCC9E-5258-4492-9D89-8FDD0D40E7DC@xxxxxxxxxxxxxxxx
Can we have two certificates share the same symmetric key?

We use sym1 key encrypted by cert1 to encrypt the column. We then add
cert2
to sym1. We want to use cert2 to open sym1 but failed with "The key is
not
encrypted using the specified decryptor" error.

Does it mean only cert1 can open sym1 key to decrypt the column since the
column was encrypted by cert1?


.

Relevant Pages

  • Re: Two certificates sharing the same symmetric key
    ... If you cannot decrypt sym1 using cert2, the problem most likely is in how ... We use sym1 key encrypted by cert1 to encrypt the column. ...
    (microsoft.public.sqlserver.security)
  • RE: NTE_BAD_DATA
    ... They are NOT used DIRECTLY to encrypt / decrypt data; ... you should generate a RANDOM SESSION KEY and select a SYMMETRIC ENCRYPTION ... // imported from a BLOB read in from the source file or having ...
    (microsoft.public.platformsdk.security)
  • Re: Back Doors
    ... >> Design into the system a master key. ... Encrypt that with public key. ... Decrypt random symmetric key with private key. ...
    (sci.crypt)
  • Re: CAPI and RC4: can not decrypt when Final parameter is set to F
    ... to store ASYMMETRIC key pairs - never symmetric keys like RC4, ... Now when you need to encrypt at one place and decrypt at the other normally ... Get a HCRYPTPROV handle to a key container with CryptAcquireContext ...
    (microsoft.public.platformsdk.security)
  • Re: RSA - Public vs. Private Keys
    ... This is a common pattern for license software ... your client will send a unique machine hash to the ... will let us decrypt with a Public Key (or simply not ... |> RSA is intended to encrypt messages with public keys only. ...
    (microsoft.public.dotnet.security)
Quantcast