Professional Web Applications Themes

Encryption - Microsoft SQL / MS SQL Server

I have one field in one table that has sensitive information that I need to encrypt. Has anyone out there had to deal with simular....How did you get this done?...

  1. #1

    Default Encryption

    I have one field in one table that has sensitive information that I need to
    encrypt. Has anyone out there had to deal with simular....How did you get
    this done?


    John Guest

  2. #2

    Default Re: Encryption

    You may want to look at:
    http://www.sqlsecurity.com/DesktopDefault.aspx
    http://www.aspfaq.com/show.asp?id=2249

    John

    "John Hamilton" <com> wrote in message
    news:phx.gbl... 
    to 


    John Guest

  3. #3

    Default Re: Encryption

    John,

    What information are you actually storing?

    Danny.


    "John Hamilton" <com> wrote in message news:phx.gbl... 


    Daniel Guest

  4. #4

    Default Re: Encryption

    On Mon, 21 Jul 2003 06:48:40 -0500, "John Hamilton" <com> wrote:
     

    What are you trying to encrypt, and do you need to decrypt it?

    I had a need to encrypt application passwords (application controlled security,
    including password histories etc. across multiple database platforms). I used
    MD5 one-way hashes which were stored in the database. SQL security prevents
    general users from seeing these fields, only admins can see them, but they can't
    see what the original passwords were. I used Microsoft's Crypto API for the
    encryption, both of the original password and of the user-entered password that
    is compared with the stored versions.

    If you need to decrypt also (i.e. it is real data, not just a validation
    signature like my example), then MD5 is not for you. However, you could still
    use the Crypto API. But then, you will need to either hard-code the encryption
    key (BAD!) or have it entered each time (mildly better), or perhaps even use a
    digital certificate (much better).

    One has to ask, though - do you need to encrypt the data, or just secure it?
    Making the table or even just the sensitive columns unavailable to application
    users might be sufficient, and certainly less problematic.

    cheers,
    Ross.
    --
    Ross McKay, WebAware Pty Ltd
    "Since when were you so generously inarticulate?" - Elvis Costello

    Ross Guest

  5. #5

    Default Re: Encryption

    John,

    You might want to have a look at wiCrypt by www.whamware.com

    Tom

    "John Hamilton" wrote: 


    Tom Guest

  6. #6

    Default Encryption

    Hi,
    How can I encrypt user passwords (not server or db password,my application
    user).
    I remember that we can do that but I don't remember now and I couldn't find
    in Books Online.

    Thanks in advance,
    Salim



    Salim Guest

Similar Threads

  1. Encryption
    By CyBORG in forum Coldfusion Database Access
    Replies: 1
    Last Post: April 15th, 05:14 PM
  2. URL Encryption
    By Amir in forum ASP.NET Security
    Replies: 4
    Last Post: September 8th, 04:46 PM
  3. About Encryption ...
    By José Pérez Hernández in forum ASP.NET Security
    Replies: 1
    Last Post: April 14th, 08:51 PM
  4. Need help with encryption
    By gh0st54 in forum ASP.NET Security
    Replies: 0
    Last Post: November 13th, 02:55 PM
  5. encryption Help
    By Brad. B webforumsuser@macromedia.com in forum Macromedia Director Basics
    Replies: 4
    Last Post: October 6th, 01:46 PM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139