Re: Encrypting Data using SQL Server 2005


"Greg Larsen" <gregalarsen@xxxxxxxxxxxxxxxx> wrote in message
news:1DB4AD7C-69C7-4BD8-B48F-8166CD35DABE@xxxxxxxxxxxxxxxx
Can't seem to see those attachments. But I think from your reply you
confirmed what I was saying.

Now what I wonder is why are you encrypting a symmetric key with another
symmetric key. What exactly does this accomplish?

It provides layered protection for your keys. You can theoretically replace
any key in the mid- to upper-levels of your key hierarchy and only need to
decrypt and re-encrypt the keys it protects, until you reach the
bottom-level keys. The result is that you can theoretically change
intermediate and top-level keys on very often with very little effect on
your server or processes, and you can change bottom-level keys much less
often.

Of course if you change the bottom-level keys you have to decrypt and
re-encrypt all your protected data, which can be a resource-intensive
operation.


.

Relevant Pages

  • Re: About jobfuscate
    ... Obfuscators (and also copy protection) are ... Obfuscation is, essentially, weak encryption. ... encryption but leaves a decryption key in the hands of every would-be ... asymmetric ciphers used to encode symmetric session keys for things ...
    (comp.lang.java.programmer)
  • Re: Erasing an OTP file on a SD card.
    ... >> AES is the main protection, and OTP will not do the AES weaker. ... The keys are collected when the user writes randomly over the handheld ... If you don't have a secure way to protect the authentication process, ...
    (sci.crypt)
  • Re: About crackers and Dinky Dongle
    ... We use the dongles for a long time as a copy protection, ... but at the end they found out ways to crack it. ... > of these hardware keys called Dinkey Dongle. ... > which you can use to lock your app to a computer, i.e., your app would ...
    (borland.public.delphi.non-technical)
  • Re: Code To Make Trial Version Software Release
    ... Nicholas Sherlock wrote: ... > I was trying to run a trial program a second time, ... Solution: Delete keys. ... Just like Sony decided they had the prefect copy protection method for ...
    (alt.comp.lang.borland-delphi)
  • Re: Enable users to modify Protected Registry Keys
    ... Doesn't an admin have the privilege to change the protection of protected ... > have the privileges of changing either protected keys ... >>By default users are not able to modify registry keys under ...
    (microsoft.public.vc.mfc)