Please start any new threads on our new site at https://forums.sqlteam.com. We've got lots of great SQL Server experts to answer whatever question you can come up with.

 All Forums
 SQL Server 2005 Forums
 Transact-SQL (2005)
 two-way encryption in MS SQL 2K ?

Author  Topic 

BitShift
Yak Posting Veteran

98 Posts

Posted - 2007-01-09 : 15:30:24
How can I go about using two-way encryption with a column of a table in sql server 2000 ? Ive been asked to see if sql server will encrypt a column of a table with a two-way hash so that we can unecrypt the values if needed.

help ?

jezemine
Master Smack Fu Yak Hacker

2886 Posts

Posted - 2007-01-09 : 15:38:41
I have done something similar but had the client use DPAPI to do the encrypt/decrypt, and only stored/returned encrypted values from sql server.

I don't think 2000 has this capability out-of-the-box (could be wrong though).

This might help, seems to be a 3rd party addon that allows encrypt/decrypt from within sql server. uses extended stored procs to do the work:

http://www.sqlservercentral.com/columnists/mcoles/sql2000dbatoolkitpart1.asp


www.elsasoft.org
Go to Top of Page

SwePeso
Patron Saint of Lost Yaks

30421 Posts

Posted - 2007-01-09 : 15:58:49
I made this for RC4 encryption/decryption
http://www.sqlteam.com/forums/topic.asp?TOPIC_ID=76258


Peter Larsson
Helsingborg, Sweden
Go to Top of Page

Michael Valentine Jones
Yak DBA Kernel (pronounced Colonel)

7020 Posts

Posted - 2007-01-09 : 16:36:57
Here is a commercial product that does encryption using extended stored procedures:
http://www.xpcrypt.com/products.html

I have used it without any problems.





CODO ERGO SUM
Go to Top of Page

snSQL
Master Smack Fu Yak Hacker

1837 Posts

Posted - 2007-01-09 : 17:21:30
Take a look at a solution I gave someone here
http://sqlteam.com/forums/topic.asp?TOPIC_ID=73729#264369
Go to Top of Page

jezemine
Master Smack Fu Yak Hacker

2886 Posts

Posted - 2007-01-09 : 18:22:57
imo, it's seems safer to avoid encrypting/decrypting on the server, because that means you are sending unencrypted data to/from the client over the wire. bad guys with packet sniffers could pick up what you are sending.


www.elsasoft.org
Go to Top of Page
   

- Advertisement -