Re: Encrypting Data

On Tue, 5 Dec 2006 10:01:39 -0700, "Tim" <tim@xxxxxxx> wrote:

Hi,

I need to encrypt sensative data in a SQL db like ssn, driver license... I
was looking at using
SymmetricAlgorithm using DES to encrypt and decrypt the data. Since I need
to decrypt the data I cannot use hash like I do for login. Any thoughts?

Thanks

1 Many SQL databases have encryption already built in, that will
probably be easier to use than anything you can develop. Check the
documentation for your database. You may get more specific advice on
a newsgroup devoted to your database.

2 DES is obsolete, do not use it unless you have a need to be
compatible with a legacy system.

3 The current standard encryption algorithm of choice is AES. Use
that unless you have a specific reason not to.

4 You will be able to get more expert advice on encryption in general
at sci.crypt. I should warn you that some of the advice can be a bit
fierce.

rossum

.

Relevant Pages

  • Re: how to decrypt an encrypted stored proc in 2005
    ... SQL 2005 still obfuscates object encryption in a similar manner to SQL 2000. ... tinyint,@procNameLength int ... SELECT @BasePos = 1 ...
    (microsoft.public.sqlserver.security)
  • Re: how to decrypt an encrypted stored proc in 2005
    ... remove the feature for the same reason. ... Using a stronger encryption algorithm ... So the feature is unchanged in SQL 2005 from SQL 2000. ... SELECT @BasePos = 1 ...
    (microsoft.public.sqlserver.security)
  • Re: Encryption of application configuration block
    ... If your trying to protect an Sql login password then instead create an Sql ... access to Sql Server objects based on the current users' Windows account. ... If your really must encrypt your connection strings here are some links, ... I come to secure the app.config file via encryption. ...
    (microsoft.public.dotnet.general)
  • Re: how to decrypt an encrypted stored proc in 2005
    ... Everyone that cares needs to realize that object "encryption" in SQL 2005 is ... tinyint,@procNameLength int ... SELECT @BasePos = 1 ...
    (microsoft.public.sqlserver.security)
  • Re: Connection to SQL Server CE Windows Service via C# - Error 250
    ... This is probably 3rd time I am hereing to a case the encryption related ... In SQL CE v3.1 case, can you try using Crypto API under the same credentials ... specific to your database or if it's really the password itself. ... connect to it via the windows service under the Local Service ...
    (microsoft.public.sqlserver.ce)