Please start any new threads on our new site at https://forums.sqlteam.com. We've got lots of great SQL Server experts to answer whatever question you can come up with.

 All Forums
 SQL Server 2005 Forums
 SQL Server Administration (2005)
 sql server authentication encryption?

Author  Topic 

bogey
Posting Yak Master

166 Posts

Posted - 2011-05-05 : 15:15:53
Can anyone elaborate on how sql server 2005 stores user/passwords for sql server authentication (type of encryption) . We have an audit going on and this was one of the questions we are being asked.

robvolk
Most Valuable Yak

15732 Posts

Posted - 2011-05-05 : 15:21:38
I believe it's more of a hash function rather than encryption, I know Microsoft does not provide a way to decrypt the password.

There are 2 undocumented functions, PWDENCRYPT() and PWDCOMPARE() that might be used internally to hash and compare the passwords. You'll find more information about them via Google/Bing.
Go to Top of Page

bogey
Posting Yak Master

166 Posts

Posted - 2011-05-09 : 07:28:14
quote:
Originally posted by robvolk

I believe it's more of a hash function rather than encryption, I know Microsoft does not provide a way to decrypt the password.

There are 2 undocumented functions, PWDENCRYPT() and PWDCOMPARE() that might be used internally to hash and compare the passwords. You'll find more information about them via Google/Bing.



Thanks
Go to Top of Page
   

- Advertisement -