Re: Secure data in SQL Server 2005 Mobile Edition



Hi,

We have decided to go ahead with encrypted the entire database for now, thus
I am trying to encrypt a database on SQL Server 2005 on a desktop and
replicate this database on SQL Server Mobile Edition on a mobile device.

I followed the "How to: Secure a Database (SQL Server Management Studio)"
topic in the SQL Server 2005 Mobile Edition Books Online to set a password
for my database connection string and checked the encrypt option. But when I
tried to access the database on the mobile device by opening a
sqlceconnection, I got the following error:

The specified password does not match the database password.

I have ensured that my connection string is correct with the correct data
source and correct password. I have even tried changing passwords but I still
got the same error.

1. Is this the correct way of encrypting a database? Am I doing wrong or
missing anything?

2. What is the encryption algorithm used by SQL Server Management Studio
when the encrypt option is chosen?

Thanks for the help.

"Ginny Caughey [MVP]" wrote:

The size is the same whether it's encrypted or not. I used the Northwind
database for my tests but the larger AdventureWorks one might also make an
interesting test.

I think the best way to get answers for your specific case would be to build
encrypted and non-encrypted databases with the schema you need and run a few
simple tests for yourself. Frankly the reason I didn't spend more time doing
thorough testing was that I think if you need encryption, then you neeed it
and whatever the perf hit, well that's the price you pay. Still I was
pleased to find the hit was a small one in my tests.

--
Ginny


"AimlessZombie" <AimlessZombie@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:2B849C1A-0785-4C8B-BD52-9DFDB4359A80@xxxxxxxxxxxxxxxx
What about the database size?

"Ginny Caughey [MVP]" wrote:

I didn't test it with different schemas. The hit on the device was
between
8-10% for most operations. On the desktop it was barely measurable.

--
Ginny


"AimlessZombie" <AimlessZombie@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message
news:428B5E6D-B41C-428A-BC94-9BF040568FDE@xxxxxxxxxxxxxxxx
Thanks for your reply.

Not exactly that I wanted a more complicated encryption, but i was
worried
about the performance hit for encrypting the whole database.

Can I ask what is the size of the database you tested with? Also, would
the
performance hit be affected by the database schema?

"Ginny Caughey [MVP]" wrote:

Encryption in SQL Mobile is at the database level only. In my testing
the
performance hit for using encryption is quite low, and using an
encrypted
database is as easy as providing a password in the connection string,
so
I'm
not sure why you'd want something more complicated than that.

--
Ginny


"AimlessZombie" <AimlessZombie@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message
news:721B8943-84FA-41DF-8AFB-633C0A85F1DA@xxxxxxxxxxxxxxxx
I understand that it is possible to encrypt a database in SQL Server
2005
Mobile Edition. But I do not want to encrypt the entire database.
Instead
I
just want to encrypt only selected data in the database.

Can this be done in Mobile Edition? If yes, how to do it and is
there
any
reference sites?

Many thanks.



.



Relevant Pages

  • Re: Storing Connection String
    ... you can encrypt the traffic to the SQL Server. ... Hitchhiker's Guide to Visual Studio and SQL Server ... My idea is to have just one database user whose username and password ... Which means that if an user get hold of connection string ...
    (microsoft.public.dotnet.framework.adonet)
  • Re: How To Protect Backup being restoted in any others from other serv
    ... And I completely forgot about the 3:rd party utils which can encrypt along with compression on the fly. ... >> The only "security" feature provided by SQL Server is password. ... >> other servers (in case Database backup stolen from us). ...
    (microsoft.public.sqlserver.server)
  • Re: Secure data in SQL Server 2005 Mobile Edition
    ... One other thing to try is not checking the encrypt option - the database still gets encrypted if you provide a password. ... replicate this database on SQL Server Mobile Edition on a mobile device. ... and whatever the perf hit, well that's the price you pay. ...
    (microsoft.public.sqlserver.ce)
  • Re: Encrypting a table
    ... SQL CE database and encrypt that database. ... "glenn" wrote in message ... > using SQL Server CE? ...
    (microsoft.public.sqlserver.ce)
  • Re: Database encryption.
    ... > I am writing application that encrypt paradox type database with IDEA ... which is used to mark end of string. ...
    (sci.crypt)