I'm trying to encrypt a column in my table using
EncryptWithPassPhrase( @PASSPHRASE, @COLUMNDATA)
My Question is, does PASSPHRASE have to be (at least ) as long as the column data? Is there a problem if it is longer>
I'm only storing part of the results, and it looks like the # of characters I'm storing is the length of my passphrase.
Thanks,
Phil
I have created two user defined functions for encryption and decryption using passphrase mechanism. When I call encryption function, each time I am getting the different values for the same input. While I searching a particular value, it takes long time to retrieve due to calling decryption function for each row.
best way to encrypt and decrypt using user defined functions.Below is the query which is taking long time.
SELECT ID FROM table WITH (NOLOCK)
WHERE dbo.DecodeFunction(column) = 'value'
When I try to use symetric or asymetric encryption, I am not able to put "OPEN SYMETRIC KEY" code in a function. So, I am using PassPhrase mechanism.
How do we Encrypt a field values of a table in SQL Server 7.0
Bye
Amar
hey ppl..
i am creating a client that can access straight into the sql db using vb.net.
is there a way encrypt the data from the client and the sql server will decrypt the data and visa versa?
I am using SQL Server Encryption functions to encrpt the data.I also use that column in my search criteria.
While seaching fro that binary column it is really slow. Its doing index scan on the table. Following are the steps i follow:-
I encrupt the actual value & then search it in the encrypted column in the database.
Any suggestions or experiences please le me know
Hello guys. Here's the scenario. I'm opened to any suggestions. We have thousands of users with laptops running Windows XP SP2. The users login as the Admin of the machine. I know, I know, very bad practice and I totally agree with you. For whatever reason that part has to remained unchanged. In the Laptop we will install an application that will need to work offline so the application will maintain the data using SQL Server 2005 Express. We need to encrypt the whole DB, meaning we need to encrypt the Data File(s) + the Log File(s).
Requirements:
1. We need Stored Procedures (SQL Server 2005 Compact is out of the question).
2. The encryption has to be transparent to the client and Stored Procedures (meaning no column nor table encryption)
3. Whatever method used has to be able to work around the fact the user running is an admin (Windows EFS is out of the question)
Does SQL Server 2005 Standard allow whole DB encryption? How about SQL Express?
We found NetLib Encryptionizer which is exactly what we want, but we do not want to limit our options so we are still looking for other posiblities.
What do you guys recommend?
Thanks...
Hi - this is a repost of a question that I originally posted in Security. Ok, I'm very new to this topic. I'm working on an application that
requires that some information in the db be encrypted and then
decrypted when retrieved. I have everything set up and it works fine
except for one thing. I can't seem to be able to pass a parameter into
the sp that is used to decrypt the key. It only seems to take the
string when typed in. I really think I'm missing something here. It
doesn't seem all that great to have your password hard-coded into the
stored procedure. Maybe I'm just screwing something up? Anyway, I
can't get it to work if it looks like this:OPEN SYMMETRIC KEY Key_NameDECRYPTION BY PASSWORD = @pwdThis does work:OPEN SYMMETRIC KEY Key_NameDECRYPTION BY PASSWORD = 'password'This
has to be some goof on my part right? If the db machine is compromised
you're giving the keys to decrypt the data away as well - they just
haver to open your stored proc. You should keep them separate imo and
I hope someone can set me straight. Also, encrypting the stored
procedure is an option, but it's very easy to decrypt from what I've
read. Can someone help point me in the right direction? Thanks! And thanks to the mod that suggested moving this post. Any help will be appreciated.
I am having a problem with some code I have in a DLL that is running in SQL Server 2005. I am trying to get some RSA encryption and decryption. The encrypt code runs in SAFE mode without a problem. The decrypt code gets and error:
Msg 6522, Level 16, State 1, Line 1
A .NET Framework error occurred during execution of user-defined routine or aggregate "March_CryptoDecrypt":
System.Security.SecurityException: Request for the permission of type 'System.Security.Permissions.KeyContainerPermission, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089' failed.
System.Security.SecurityException:
at System.Security.CodeAccessSecurityEngine.Check(Object demand, StackCrawlMark& stackMark, Boolean isPermSet)
at System.Security.CodeAccessPermission.Demand()
at System.Security.Cryptography.RSACryptoServiceProvider.ImportParameters(RSAParameters parameters)
at System.Security.Cryptography.RSA.FromXmlString(String xmlString)
at Crypto.DoCrypto.Decrypt(String P_text, String P_privateKey)
at SQLServerCrypto.Decrypt(SqlString P_text, SqlString P_privateKey)
Here is the decrypt code:
static public string Decrypt(string P_text, string P_privateKey)
{
string retStr;
string encryptedBlock = "";
string localTextStr = P_text;
int numberOfBlocks;
RSACryptoServiceProvider rsaProvider = new RSACryptoServiceProvider();
rsaProvider.FromXmlString(P_privateKey);
Queue<string> encryptedBlocks = new Queue<string>();
while (localTextStr.Length != 0)
{
if (rsaProvider.KeySize == 1024)
{
encryptedBlock = localTextStr.Substring(0, localTextStr.IndexOf("=") + 1);
encryptedBlocks.Enqueue(encryptedBlock);
localTextStr = localTextStr.Remove(0, encryptedBlock.Length);
}
else
{
encryptedBlock = localTextStr.Substring(0, localTextStr.IndexOf("==") + 2);
encryptedBlocks.Enqueue(encryptedBlock);
localTextStr = localTextStr.Remove(0, encryptedBlock.Length);
}
}
encryptedBlocks.TrimExcess();
numberOfBlocks = encryptedBlocks.Count;
retStr = "";
for (int cnt = 1; cnt <= numberOfBlocks; cnt++)
{
encryptedBlock = encryptedBlocks.Dequeue();
retStr +=
ASCIIEncoding.ASCII.GetString(rsaProvider.Decrypt(
Convert.FromBase64String(encryptedBlock), false));
}
return (retStr);
}
Here is the encrypt code that works:
static public string Encrypt(string P_text, string P_publicKey)
{
string retStr;
RSACryptoServiceProvider rsaProvider = new RSACryptoServiceProvider();
rsaProvider.FromXmlString(P_publicKey);
int numberOfBlocks = (P_text.Length / 32) + 1;
char[] charArray = P_text.ToCharArray();
byte[][] byteBlockArray = new byte[numberOfBlocks][];
int incrementer = 0;
for (int cnt = 1; cnt <= numberOfBlocks; cnt++)
{
if (cnt == numberOfBlocks)
{
byteBlockArray[cnt - 1] =
ASCIIEncoding.ASCII.GetBytes(charArray, incrementer, charArray.Length - incrementer);
}
else
{
byteBlockArray[cnt - 1] =
ASCIIEncoding.ASCII.GetBytes(charArray, incrementer, 32);
incrementer += 32;
}
}
retStr = "";
for (int cnt = 0; cnt < byteBlockArray.Length; cnt++)
{
retStr += System.Convert.ToBase64String(
rsaProvider.Encrypt(byteBlockArray[cnt], false));
}
return (retStr);
}
I do not see why the encrypt can run is safe mode and the decrypt can not. Does anyone have any ideas?
Thank You,
David Demland
Hi All,Does any body know how to use encryption in sql server 2005.Is itpossible to encrypt a particular column in a table.thanks
View 3 Replies View RelatedI was wondering whether anyone ever dealt with encryption that are visacompliant with credit card numbers:On 3.4 of this document(http://usa.visa.com/download/busine...ty_Standard.pdf)It states the encryption:One-way hashes (hashed indexes), such as SHA-1- Truncation- Index tokens and PADs, with the PADs being securely stored- Strong cryptography, such as Triple-DES 128-bit or AES 256-bit withassociated keymanagement processes and procedures1. One way hashes cannot be decrypted so this won't work2. Triple DES works however we will need to encrypt SSN. Triple DESdoesn't encrypt 2 values the same way, so we cannot use it as anindex key that we wanted to. The decrypted value comes out the samehowever the encrypted values are always different. We can't do tablescans for a SSN look up.3. Truncation - I have no idea4. Index token or PAD seems like one way encryption and never can bedecrypted (not sure what this is for if it can't be decrypted)So how do I get this to work?? It doesn't say RSA is compliant either.If you think RSA is okay, where does it EXPLICITLY say that on thisdocument???:D
View 3 Replies View Related
If I understand all the posts/documentation correctly am I correct in saying that sql server will not send a symmetric key outside of database.
For Eg can I use ADO.Net to get the key from database into a C# application to do encryption/decryption in the C# application outside of database. I want the C# application to be able to encrypt/decrypt data using .Net cryptography api's but use sql server as key store in addition to encryption/decryption.
thanks for the help
Hi.
I have a SQL Server 2000 database that contains information I would like to encrypt. The information is a field inside a table, and I would like to encrypt this information using a key, and decrypt it in my asp.net application using that key and use the decrypted data.
Please tell me how this can be done, or direct me to an article or a link on the subject.
Thanks in advance.
Are there any UDf's or Xtended stored procs available in sql server 2k that can encrypt a column that has the CC #'s or do I need to purchase a 3rd party tool ?
thanks,
Dinakar
Where can I get some information on field-level encryption in SQL Server? My users will be installing my ASP.NET app on a laptop and taking it out "into the field". If it gets stolen they want some safeguards.I've suggested that they encrypt the hard drive and things, but they want field-level encryption for the data. I know how to do things like hash a password, but that doesn't help with retrieval. I have to be able to search on and decode the data. For example, I have SSN as a field. I need to be able to search on SSN, display it to the user, and allow them to change it.The other problem is partial searches. If I encrypt SSN in the database then I can probably just search on the hashed value, but if I want to search on "smith" and get all of the smiths, smithes, etc., then I can't search on the encrypted value. I have about 1 million records, so decrypting each name to do the search would be prohibitive.Anyway, I'm sure this has been done, so if there is a thread or a site that discusses this I'd be willing to read up on it.
View 1 Replies View RelatedHi,
Does anyone know how to encrpyt a field in a table created in SQL Server Database.
I know there is no native encryption in SQL2K, but what 3rd party encryption tools would other forum members recommend from experience? I am required to encrypt data for PCI compliance.
Thanks
Lempster
I inherited a lot of Servers to upgrade to 2014 to include an SSRS Server.
The encryption Key was never backed up and it seems that no one knows what the password is?
Do I have to manually load the reports? There are a lot of Reports.
[URL]
I was reading that Net-Library Encryption is an SSL utility. Does thatmean the traffic uses TCP port 443 or does it still use TCP 1433?Thanks.http://msdn.microsoft.com/library/d..._ar_cs_6fu6.asp
View 1 Replies View RelatedI developed an app which stored data in SQL 2005, and encrypted some data using EncryptByPassPhrase( PassPhrase, TheData ), DecryptByPassPhrase( PassPhrase, TheData).
One of the implementations of this will have to store the data in SQL 2000, which doesn't support this functionality. Is there a simple data encryption functionality somewhere that I can implement within a stored proc so I can have my app be independent of the back-end data base server?, i.e. so I can have two different stored procedures depending on the back end db, and not to have the front end handle the encryption?
Thanks
Phil
Hello,
I store data in an .mdf file (I use SQL server 2005), because this way it's easier to move the application from one machine to another.
I've faced a problem with the encryption of the database.
Is there a possibility/way to encrypt a database file so that, if someone else finds/copies the mdf, he/she won't be able to read it.
I thought about encrypting the string values of the tables itself and decode them inside the application and encide when Inserting, but why inventing somehing that might already exist.
Thank you.
Hello All,
I have a commercial application built for Pocket PC's that connects to SQL Server 2005 via TCP/IP over wireless networks. In installations for our sales people we installed SQL 2005 Express on their notebooks for demonstrations. In one of these installs we are getting the following error message: "An error occurred - SQL Server requires Encryption On". We do not use encrypted connections and I have verified encryption is turned off in the Options tab in SQL 2005 login screens.
Here is the connection string we use in the app.config file on the Pocket PC's:
<add key="connStr" value="Data Source=192.168.0.19,1433;Initial Catalog=SQL0018;User ID = User01;Password=PW01"/>
Other apps on the notebook are connecting to this same SQL Server without any issues. Thank you in advance for any help here,
Jack
Hi,
I am at a loss here, unless I misunderstand the whole point about server encryption. My 2005 SQL server has a certificate from a trust CA, I have turned on the 'force encryption' flags on the server. My understanding is any client will be "force" to connect with encryption?? I found out that unless I turn on encryption on my clients, the server will allow connections without the requiring encryption. Am I missing something here? Thanks for any help you can provide.
Hello All,
I have a commercial application built for Pocket PC's that connects to SQL Server 2005 via TCP/IP over wireless networks. In installations for our sales people we installed SQL 2005 Express on their notebooks for demonstrations. In one of these installs we are getting the following error message: "An error occurred - SQL Server requires Encryption On". We do not use encrypted connections and I have verified encryption is turned off in the Options tab in SQL 2005 login screens.
Here is the connection string we use in the app.config file on the Pocket PC's:
<add key="connStr" value="Data Source=192.168.0.19,1433;Initial Catalog=SQL0018;User ID = User01;Password=PW01"/>
Other apps on the notebook are connecting to this same SQL Server without any issues. Thank you in advance for any help here,
Jack
Hello All,
I have a commercial application built for Pocket PC's that connects to SQL Server 2005 via TCP/IP over wireless networks. In installations for our sales people we installed SQL 2005 Express on their notebooks for demonstrations. In one of these installs we are getting the following error message: "An error occurred - SQL Server requires Encryption On". We do not use encrypted connections and I have verified encryption is turned off in the Options tab in SQL 2005 login screens.
Here is the connection string we use in the app.config file on the Pocket PC's:
<add key="connStr" value="Data Source=192.168.0.19,1433;Initial Catalog=SQL0018;User ID = User01;Password=PW01"/>
Other apps on the notebook are connecting to this same SQL Server without any issues. Thank you in advance for any help here,
Jack
Hi everyone! I have a problem and I was hoping someone could help me with it.
Here's my scenario:
I have to access to an intermediate SQL Server 2005 database, which I cannot change or alter. In this database is information that a I need to retrieve and put in our website database. One item of information is a persons SSN which is stored in a varbinary field and encrypted using a certificate.
In my Data Flow task which processes this information I am using an Ole Db Source to retrieve the information with the SQL Script:
SELECT
CAST(DecryptByCert(Cert_ID('Certificate_Name'), [IntermediateDB].[SSN]) AS VARCHAR) As SSN
FROM
[dbo].[IntermediateDB].[SSN]
BTW, This script runs fine from within SQL Server Management Studio. It decrypts the SSN to the appropriate value. However, when I run it in SSIS, I receive a truncation error which is no small surprise b/c the SSN value is in a large binary format. I.e:
0x55 0x56 0x69 0x99 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 ...
It goes on further, but for the sake of brevity and my own sanity I thought I should truncate it.
It seems like SSIS's use of the certificate is failing (although I don't get an error for that) and is simply pulling the encrypted SSN from the intermediate table.
So my first question would be, is this actually what's going awry? And secondly, is there a way to fix this without touching the source database??
Thanks! I greatly appreciate it! And Happy Holidays!
Derek
I have setup ssl encryption for SQL connections by using a self-signed certificate (not the best I know) and setting "Force Encryption" to Yes. Now I am trying to show that the connection is indeed encrypted and I like to see which the ssl-key is used for a connection; preferably the one that I provided. How can I do this? I am just not comfortable trusting the OS or SQL to do what I ask.The query "SELECT encrypt_option FROM sys.dm_exec_connections" Shows incrypted but no extra info.
View 0 Replies View RelatedWe have a need for getting data from sqlserver DB on premise to the cloud. DB is not encrypted currently, other applications are accessing it but those applications are on premise. Following link talks about encrypted connection, but is it possible to encrypt only one of the port connection. we can add a custom port.URL...
View 3 Replies View Related
What is best way to encrypt password field in sql server 2000?.
Is there any system stored procedure to encrypt password?.
What kind of algorithm password encryption method uses?.
Hi,
I have studied a variety of online documents explaining built-in SQL Server 2005 encryption, and I'm a bit confused. Every encryption approach, it seems, ultimately replies upon a password that must be provided with queries to access the data. As an application developer, it brings up the obvious question: how should that password be provided? If I build the password into my applications, then it will no longer be secure. On the other hand, I can't possibly expect my users to provide a password every time they perform an action that requires unencrypting data. If I give that password out to 50 users, the password will become public information quickly, I am sure. We will also have to alter the password regularly. Plus several of my applications run as windows services, in which case the user (meaning the windows user under which the service runs) won't be around to type in password.
I have a better solution in mind. Is there an option to limit access to symmetric keys by windows identity? As a best-standards-abiding coder, all of my sql server access is done via Windows Authentication instead of SQL Server Authentication. Why not make it so that myorgjoe and myorgsally can access the symmetric key for a particular column, but nobody else? This way there is still a password involved, but it is now moved further up the application layers; it is the windows password that the user originally used to log into their machine to run the application.
Is there a way to make it so that access to symmetric keys (or asymmetric keys which encrypt symmetric keys) is decided solely on the basis of windows user identity?
Thank you for any thoughts!
Adam
Hi,
View 16 Replies View RelatedI read a couple of articles related to encryption topic in this forum and I feel that's really helpful I don't know if anyone has some knoeledge about the encryption issues in replication and clustering environment. I read some documents from Microsoft web site that explains how to move an encrypted database from its original server to another new server instance. That cause a lot manual works, if the database master key has been encrypted by the original service master key and you still want to enjoy the auto-open feature in the new environment. As we know the Microsoft SQL Server 2005 has a hierarchy encryption key structure and its top level service master key is really service oriented. For what kind of mechanism or set up, Microsoft makes their encrypted database working smoothly and automatically in a clustered and replicated infrastructure. Is that possible to sacrifice the security a bit by dump the service master key for database master key and make database more portable? I search the web site all the way, but couldn't find the related topic. Anybody has a good idea or experience to share?
Thanks,
The Secure Sockets Layer (SSL) can be used to encrypt data transferred on our network between our SQL Server instance and a client application. My question is that can I configure Secure Sockets Layer (SSL) encryption on my SQL Server, While this requires a trusted certificate?
View 2 Replies View RelatedI know that it is possible to encrypt data fields in SQL Server 2005, but I can't find anything about data encryption in the Compact Edition. Is this possible?
View 7 Replies View Related