I found that while using encryption and decryption by keys and certificates thsere is no security at all.
if we uses master key the sysadmin can decrypt
but if we use private key (encryption by password), how do we pass the password so that profiller didn't show it?
I have created two user defined functions for encryption and decryption using passphrase mechanism. When I call encryption function, each time I am getting the different values for the same input. While I searching a particular value, it takes long time to retrieve due to calling decryption function for each row.
best way to encrypt and decrypt using user defined functions.Below is the query which is taking long time.
SELECT ID FROM table WITH (NOLOCK)
WHERE dbo.DecodeFunction(column) = 'value'
When I try to use symetric or asymetric encryption, I am not able to put "OPEN SYMETRIC KEY" code in a function. So, I am using PassPhrase mechanism.
This function is used to initialize the seed for the RC4 algorithmCREATE FUNCTION dbo.fnInitRc4
(
@Pwd VARCHAR(256)
)
RETURNS @Box TABLE (i TINYINT, v TINYINT)
AS
BEGIN
DECLARE@Key TABLE (i TINYINT, v TINYINT)
DECLARE@Index SMALLINT,
@PwdLen TINYINT
SELECT@Index = 0,
@PwdLen = LEN(@Pwd)
WHILE @Index <= 255
BEGIN
INSERT@Key
(
i,
v
)
VALUES(
@Index,
ASCII(SUBSTRING(@Pwd, @Index % @PwdLen + 1, 1))
)
INSERT@Box
(
i,
v
)
VALUES(
@Index,
@Index
)
SELECT@Index = @Index + 1
END
DECLARE@t TINYINT,
@b SMALLINT
SELECT@Index = 0,
@b = 0
WHILE @Index <= 255
BEGIN
SELECT@b = (@b + b.v + k.v) % 256
FROM@Box AS b
INNER JOIN@Key AS k ON k.i = b.i
WHEREb.i = @Index
SELECT@t = v
FROM@Box
WHEREi = @Index
UPDATEb1
SETb1.v = (SELECT b2.v FROM @Box b2 WHERE b2.i = @b)
FROM@Box b1
WHEREb1.i = @Index
UPDATE@Box
SETv = @t
WHEREi = @b
SELECT@Index = @Index + 1
END
RETURN
ENDANd this function does the encrypt/decrypt partCREATE FUNCTION dbo.fnEncDecRc4
(
@Pwd VARCHAR(256),
@Text VARCHAR(8000)
)
RETURNSVARCHAR(8000)
AS
BEGIN
DECLARE@Box TABLE (i TINYINT, v TINYINT)
INSERT@Box
(
i,
v
)
SELECTi,
v
FROMdbo.fnInitRc4(@Pwd)
DECLARE@Index SMALLINT,
@i SMALLINT,
@j SMALLINT,
@t TINYINT,
@k SMALLINT,
@CipherBy TINYINT,
@Cipher VARCHAR(8000)
SELECT@Index = 1,
@i = 0,
@j = 0,
@Cipher = ''
WHILE @Index <= DATALENGTH(@Text)
BEGIN
SELECT@i = (@i + 1) % 256
SELECT@j = (@j + b.v) % 256
FROM@Box b
WHEREb.i = @i
SELECT@t = v
FROM@Box
WHEREi = @i
UPDATEb
SETb.v = (SELECT w.v FROM @Box w WHERE w.i = @j)
FROM@Box b
WHEREb.i = @i
UPDATE@Box
SETv = @t
WHEREi = @j
SELECT@k = v
FROM@Box
WHEREi = @i
SELECT@k = (@k + v) % 256
FROM@Box
WHEREi = @j
SELECT@k = v
FROM@Box
WHEREi = @k
SELECT@CipherBy = ASCII(SUBSTRING(@Text, @Index, 1)) ^ @k,
@Cipher = @Cipher + CHAR(@CipherBy)
SELECT@Index = @Index +1
END
RETURN@Cipher
END
Peter Larsson
Helsingborg, Sweden
This is related to post :
http://www.sqlteam.com/forums/topic.asp?TOPIC_ID=78552
got a issue with this one..im not sure why..
My results are as follows:
Select dbo.fnEncDecRc4('Orange12345', 'Hello123')
Output : ,M gl
Select dbo.fnEncDecRc4('Orange12345', ',Mgl')
Output : M
i am not able to decrypt it. Any idea why this is hapenning? Does it has to do something with regional settings?
Hi,
Does any body have a stored procedure or a function I can use? What I need is to encrypt and decrypt a password using Tiny Encryption Algorithm, SO I have an encryption scalar valued function or sproc and similarly decryption function or sproc.Now I need rolling keys to encrypt and decrypt, so I have a table which has keys used for encryption and decryption and depending on the dtae the keys are different.So I alos need a sproc to retrieve the keys.If anybody has done it before or can point me to where can I go let me know?
Thanks
Database Security, we are going to use AES 256 Symmetric Encryption. We will be using RSA for Asymmetric Key Encryption, 1024 Bits.
We got the code working for the seond case but for the first, WHEN:
CREATE SYMMETRIC KEY sym_Key WITH ALGORITHM =
AES_256 ENCRYPTION BY ASYMMETRIC KEY asym_Key
GO
THEN:
-- Msg 15314, Level 16, State 1, Line 1
-- Either no algorithm has been specified or the bitlength and the algorithm specified for the key are not available in this installation of Windows.
What can be the way out to be able to create the AES 256 Symmetric key.
I am planning to use XP_CRYPT for encrypting and decrypting cc#'s, passwords etc., at database level. Any suggestions or experiences on this. More info about this product at
http://www.activecrypt.com/faq.htm
Hi.
I have a SQL Server 2000 database that contains information I would like to encrypt. The information is a field inside a table, and I would like to encrypt this information using a key, and decrypt it in my asp.net application using that key and use the decrypted data.
Please tell me how this can be done, or direct me to an article or a link on the subject.
Thanks in advance.
I created stored function with encryption.
after i created i dont able to view the source code from system tables or any tool.
i have get back the original source code
note: i want to stored function not for stored procedure.
I would like to be able to store user network passwords in a database table and be able to encrypt and decrypt using stored procs. Could anyone give me a pointer on this.
Many thanks
I have created mirroring... one of the column is encrypted on mirror database and I can see the decrypted result when I do query when I actually logged into server (through remote connection) but when I use the same query through using SSMS from my laptop the query result come as the column is not decrypted,
View 0 Replies View RelatedHey I had a table with a column of data encrypted in a format. I was able to decrypt it and then encrypt it using Symmetric keys and then updating the table column with the data. Now, there is a user sp which needs to encrypt the password for the new user and put it in the table. I'm not being able to make it work. I have this so far. Something somewhere is wrong. I dont know where. Please help Thanks. I used the same script to do the encryption initially but that was for the whole column. I need to see the encrypted version of the @inTargetPassword variable. But it's not working. It doesn't give me an error but gives me wrong data...
declare @thePassword as varbinary(128)
,@inTargetPassword as varchar(255)
,@pwd3 as varchar(255)
,@theUserId bigint
set @theUserId= 124564
set @inTargetPassword = 'test'
OPEN SYMMETRIC KEY Key1
DECRYPTION BY CERTIFICATE sqlSecurity;
Select @pwd3=EncryptByKey(Key_GUID('Key1')
, @inTargetPassword, 1, HashBytes('SHA1', CONVERT( varbinary, [UserObjectId])))
from table1 where UserObjectId= @theUserId
close symmetric key Key1
I want to perform column level and database level encryption/decryption....
Does any body have that code written in C# or VB.NET for AES-128, AES-192, AES-256 algorithms...
I have got code for single string... but i want to encrypt/decrypt columns and sometimes the whole database...
Can anybody help me out...
If you have Store procedure in SQL for the same then also it ll do...
Thanks in advance
Hi
There is a very sensitive table that holds a very sensitive field (i.e. a person's salary). I have a requirement to programmatically encrypt it when the value is stored (I can do that quite easily in the VB client app), but there are times when a suitably 'sa' user should be allowed to perform a SELECT of the table and to view the salary field in the clear.
I think a SQL2000 user-defined function can do the job. The catch is that the client is running SQL 7 and he will only upgrade 'over his dead body', or words to that effect.
Appreciate any ideas you can give!
Cheers & TIA
Is there any way i could apply encryption on a varchar type column without changing its datatype to varbinary.
View 6 Replies View RelatedI understand that Dialog Security + certificates can be used to encryption individual dialogs. I have several demos working now that do just this.However, I don't fully understand exactly when the messages are encrypted, and if they are ever written to a queue on the initiating service prior to being encrypted. I want to make sure that admins can't simply query the transmission queues to get clear text messages, because I have strict requirements that I encrypt all personal data that is stored anywhere in a database.
BOL is a little unclear on this topic. The relevant doc reads:For a dialog that uses security, Service Broker encrypts all
messages sent outside a SQL Server instance. Messages that remain within a SQL
Server instance are never encrypted. In dialog security, only the database that
hosts the initiating service and the database that hosts the target service need
to have access to the certificates used for security. That is, an instance that
performs message forwarding is not required to have the capability to decrypt
the messages that the instance forwards.Does this imply that message destined for an external service aren't encrypted until they leave the instance? Or does Service Broker figure out that the message is destined for a remote service and therefore applies encryption to the message_body prior to the message hitting the transmission queue on the initiating service?Many thanks, Kevin
I have a question regarding Transparent Data Encryption. I have enabled TDE on a database using the below steps:
1. Create a master key encryption by a password.
2. Create a certificate in the the user database named 'TDE_Test' protected by the master key.
3. Create database encryption key 'TDE_Test' using the certificate created in Step 2.
4. Enable encryption by using the command 'ALTER DATABASE
TDE_Test SET ENCRYPTION ON'
I understand that if I need to copy this TDE encrypted database to a different SQL Instance, I have to copy the certificate from the source Instance to the destination Instance.Now my question is, do the Service Master Key and Database Master Key come into the picture here anywhere?
Are these related to TDE in any way? Do I have to take regular backups of the Service Master Key & Database Master Key as part of regular maintenance for the SQL Instance that has a TDE encrypted database?
I am using SQL server 2012 Management studio and I have some confidential data on publisher which is being replicated to subscriber and i want to revoke permission for decryption at publisher end which is only possible using Asymmetric key as it allows only private key to decry-pt the data. But problem which i am facing is,we can not take backup of asymmetric keys which i could restore at subscriber. I do not want to share the private key password with sender. Is there any way to achieve it?
View 9 Replies View RelatedWe are unable to login in database due to “The server could not load the certificate it needs to initiate an SSL connection. It returned the following error: 0x80090331. Check certificates to make sure they are valid. Unable to initialize SSL encryption because a valid certificate could not be found, and it is not possible to create a self-signed certificate.”we have tried to run that selfssl.exe from command prompt followed by below command and am getting the cryptographic error.
View 3 Replies View RelatedI want to enforce a unique constraint on a column which must be encrypted in MSSQL 2005 using Cell Level Encyption (CLE).
CREATE MASTER KEY ENCRYPTION BY PASSWORD = 'itsaSECRET!!!3£3£3£!!!'
CREATE CERTIFICATE ERCERT WITH SUBJECT = 'A cert for use by procs'
CREATE SYMMETRIC KEY ERKEY
WITH ALGORITHM = AES_256
ENCRYPTION BY CERTIFICATE ERCERT
[Code] ....
The output makes it obvious why the constraint has 'not' been enforced.
Email
-------
1 | 0x00703529AF46D24BA863A3534260374E01000000328909B51BA44A49510F24DF31
C46F2E30977626D96617E2BD13D9115EB578852EEBAE326B8F3E2D422230478A29767C
2 | 0x00703529AF46D24BA863A3534260374E01000000773E06E1B53F2C57F97C54370FECBB45B
C8A154FEA5CEEB9B6BB1133305282328AAFAD65B9BDC595F0006474190F6482
3 | 0x00703529AF46D24BA863A3534260374E01000000C9EDB1C83B52E60598038D832D34
D75867AB0ABB23F9044B7EBC76832F22C432A867078D10974DC3717D6086D3031BDB
But, how do I work around this?
How to decrypt a Stored Procedure which has been encrypted in SQL Server 7.0
Thanks in Advance
Regards,
Karthik
I am using the below function written by PESO to encrypt/Decrypt the data for my SSN Numbers stored as a Clear Text
First I am Encrypting all my SSN's using this function and storing it in the database in a seperate Column,
Some thing like this..
SELECT DBACentral.dbo.fnEncDecRc4( '145678908' , 'ty6578dmp1203' )
OUPPUT
--------
âUÙN_{??
How to Decrypt ( âUÙN_{?? ) using the below function.
CREATE FUNCTION dbo.fnEncDecRc4
(
@Pwd VARCHAR(256),
@Text VARCHAR(8000)
)
RETURNSVARCHAR(8000)
AS
BEGIN
DECLARE@Box TABLE (i TINYINT, v TINYINT)
INSERT@Box
(
i,
v
)
SELECTi,
v
FROMdbo.fnInitRc4(@Pwd)
DECLARE@Index SMALLINT,
@i SMALLINT,
@j SMALLINT,
@t TINYINT,
@k SMALLINT,
@CipherBy TINYINT,
@Cipher VARCHAR(8000)
SELECT@Index = 1,
@i = 0,
@j = 0,
@Cipher = ''
WHILE @Index <= DATALENGTH(@Text)
BEGIN
SELECT@i = (@i + 1) % 256
SELECT@j = (@j + b.v) % 256
FROM@Box b
WHEREb.i = @i
SELECT@t = v
FROM@Box
WHEREi = @i
UPDATEb
SETb.v = (SELECT w.v FROM @Box w WHERE w.i = @j)
FROM@Box b
WHEREb.i = @i
UPDATE@Box
SETv = @t
WHEREi = @j
SELECT@k = v
FROM@Box
WHEREi = @i
SELECT@k = (@k + v) % 256
FROM@Box
WHEREi = @j
SELECT@k = v
FROM@Box
WHEREi = @k
SELECT@CipherBy = ASCII(SUBSTRING(@Text, @Index, 1)) ^ @k,
@Cipher = @Cipher + CHAR(@CipherBy)
SELECT@Index = @Index +1
END
RETURN@Cipher
END
GO
Thanks for any help
I have been testing two way symmetrical encryption. I have been able to encrypt rows of a spacific column using the following UPDATE statement, however, when I try and decrypt them, the query returns Null for the effected rows.
Can anyone see where I may have gone wrong in the decryption statement?UPDATE tblReceipts SET tblReceipts.CCNumber = EncryptByPassPhrase('Abracadabra!1234$',tblReceipts.CCNumber)
FROM tblReceipts
WHERE tblReceipts.CreditCardType > 0
Decrypt Does Not Work?????
SELECT CONVERT(varchar, DecryptByPassPhrase('Abracadabra!1234$',tblReceipts.CCNumber)) AS CCNumber
FROM tblReceipts
WHERE tblReceipts.CLIENTID = 15000My CCNumber field is nvarchar(20)My PassPhrase is just a test phraseThe data after it is encrypted in just a bunch of binary looking boxes
Hi,
Every one
Can i Encrypt & Decrypt Data store in SQL SERVER table. If field is alredy Encripted, then how I can decrypt in SQL SERVER.
Thanks
Nirmal
How do I tell SQL Server what key to use for DES3 decryption? I want to encrypt in Oracle and after ETL to SQL Server, be able to decrypt but keep a column's value encrypted in Oracle, SSIS and SQL side - only decrypting on the SQL Server side when needing to use the value.
View 1 Replies View RelatedWhat solutions are available?
Is there a way to read about from server's metadata?
Gus
I wanted to configure Report Server and publish my reports. I configured report server 2005 on win 2003 os. I prepared few reports and deployed them. When I tried to view this report thru ReportServer (http://localhost/ReportServer) from my local machine, I got the following error message:-
The encrypted value for the "UnattendedExecutionAccountPassword" configuration setting cannot be decrypted.
The report server has encountered a configuration error. See the report server log files for more information.
Can anyone help me in solving this!
I will highly appreciate it.
Thanks in advance,
hemal
I'm trying to put together a proof of concept utilizinf encryption with SQL Server and neded to get a little help. I've got the basics down but I'm not seeing the expected results. Here's the script that I'm running against a very simple table. I'm essentially just adding a coulmn to hose encrypted data, encrypting that data, and then selecting that data - in both encrypted and decrypted form:
Code Block
CREATE CERTIFICATE LAND_ENCRYPT_ACCOUNT3
WITH SUBJECT = 'ExternalAccountID';
GO
CREATE SYMMETRIC KEY AccountID3_01
WITH ALGORITHM = AES_128
ENCRYPTION BY CERTIFICATE LAND_ENCRYPT_ACCOUNT3;
GO
USE [LAND_ENCRYPT];
GO
-- Create a column in which to store the encrypted data.
ALTER TABLE Account
ADD EncryptedAccountID3 varbinary(128);
GO
-- Open the symmetric key with which to encrypt the data.
OPEN SYMMETRIC KEY AccountID3_01
DECRYPTION BY CERTIFICATE LAND_ENCRYPT_ACCOUNT3;
-- Encrypt the value in column NationalIDNumber with symmetric
-- key SSN_Key_01. Save the result in column EncryptedNationalIDNumber.
UPDATE Account
SET EncryptedAccountID3 = EncryptByKey(Key_GUID('AccountID3_01'), ExternalAccountID);
GO
-- Verify the encryption.
-- First, open the symmetric key with which to decrypt the data.
OPEN SYMMETRIC KEY AccountID3_01
DECRYPTION BY CERTIFICATE LAND_ENCRYPT_ACCOUNT3;
GO
-- Now list the original ID, the encrypted ID, and the
-- decrypted ciphertext. If the decryption worked, the original
-- and the decrypted ID will match.
SELECT ExternalAccountID, EncryptedAccountID3
AS 'Encrypted ID Number',
CONVERT(nvarchar, DecryptByKey(EncryptedAccountID3))
AS 'Decrypted ID Number'
FROM Account;
GO
But when I run the "decrypt" the data, the only character that appears unencrypted is the very last character of each account number:
ExternalAccountID Encrypted ID Number Decrypted ID Number
-------------------------------------------------- ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ ------------------------------
12345654444 0x007B9CA28582AC42B36EBD8DFF91434701000000E267255EC20E27E5B4AC03E68C508ADCFA2EB815C234116D54FEE639685D7ECF49BB200140952E45A246AFE83BF53444 ㈱?㘵??4
12312312312 0x007B9CA28582AC42B36EBD8DFF91434701000000DB3838A7C459A2F031B1FFECF2499647C7DE10B7A20171EFDEA68320F7996CCC1C6A45011E93361F9A93494F49311CB9 ㈱ㄳ㌲㈱ㄳ2
12345678901 0x007B9CA28582AC42B36EBD8DFF9143470100000057EEEC0B1E223819EBF8186F0CBFEF8FDF4BFF4C0DCE322FAB8735DC8EA144B5937FFCC745A7FC427282C493DFECD901 ㈱?㘵 〹1
The first value is the unencrypted account id, the second is the encrypted account id, the last is the decrypted account id. As you can see, the decrypted value isn't quite right.
I've tried the AES_256, DES, and AES_128 algorithms and they all yield the same result.
Am I missing something?
Also, if I'm going to be inserting into an encrypted column, do I need to do it via a view and a trigger, or can I just do a straight forward INSERT / UPDATE?
Thanks!!!!!
Is there anyway by which I can decrypt the encrypted Stored Procedures which the Previus DBA had written and its running in Production . I need to make some changes to the Stored Procedure. Is is possible
View 1 Replies View RelatedHi
I get a strange error on my SQL Server 2005 database when I try to start replication.
Here is the manipulation leading to my problem:
1. Install new Windows server 2003 and SQL Server 2005 STD, service pack 2.
Server is part of a domain.
SQL2k5 is running under the LocalSystem account on each machine.
2. Get a copy of yesterday's full backup and transaction logs from running production SQL2k5 server.
3. Restore master, model, msdb and other user databases.
4. Try to start replication using the wizard.
I get the following error message
Msg 15466 sp_addlinkedsrvlogin
An error occurred during decryption.
Msg 15185 no remote user distributor_admin
I suspect this problem has to do with master service keys but need some advice. I am not sure it is related to the master restore since it also occurs on the production machine.
What should I do with this error message ?
TIA
Stephane
Subject:RijndaelManaged decryption from SQL Server
Issue: I am trying to move the decryption code from C# to SQL Server 2005.
Web.config
...
<symmetricCryptoProviders>
<add algorithmType="System.Security.Cryptography.RijndaelManaged, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=xxxxxx" protectedKeyFilename="C:Keysfffff.key" protectedKeyProtectionScope="LocalMachine" type="Microsoft.Practices.EnterpriseLibrary.Security.Cryptography.SymmetricAlgorithmProvider, Microsoft.Practices.EnterpriseLibrary.Security.Cryptography, Version=2.0.0.0, Culture=neutral, PublicKeyToken=null" name="RijndaelManaged"/>
</symmetricCryptoProviders>
...
.cs file
....
decString = Cryptographer.DecryptSymmetric("RijndaelManaged", encString);
....
I try to pass the key used to decrypt symmetric key to a stored procedure as a parameter like this:
OPEN SYMMETRIC KEY MyKey
DECRYPTION BY PASSWORD=@ keypassword;
I get an error message saying "Incorrect syntax near "@keypassword".
Is there something that I am missing?
Sql server 2008R2 (SP2) Ent, PROD DB myDB was encrypted. During Release mistakenly (Vendor created script blames some settings in ...- actually does not matter) Decryption started (ALTER .. SET ENCRYPTION OFF) as we got from ErrorLog.
For some reason initial encryption scan was aborted and then mentioned command: ALTER ... OFF was issued again. What we have now (after 60 h of decryption- encryption took only 2.5 h)- is_encrypted = 0 in sys.databases, encryption_state = 5 (decryption in progress) in sys.dm_database_encryption_keys (percent_complete= 0). But it seems myDB is still encrypted- I made a backup of myDB and tried to read it (restore filelistonly) from other server (with no encryption)- failed- asked for key. Seems metadata was changed when initial scan during decryption started but then stuck and (if I am correct) decryption was never completed. Question- any similar experience? How we can fix meta- data, i.e. assuming that myDB is still encrypted we should have is_encrypted = 1 and encryption_state = 3 (encrypted).