So I was asking in chat about how secure SQL Server backup files are.
I'm told that if an attacker has access to the .bak file unencrypted that they can have access to the data.
So lets look at this scenario :
OPEN SYMMETRIC KEY MySymetricKey DECRYPTION BY CERTIFICATE MyCertificate
notice - there is no password here.
and then we encrypt our tables by :
UPDATE tbl1 SET namePAss = ENCRYPTBYKEY(KEY_GUID('MySymetricKey'),name) GO
Now lets say a hacker got my
bak file. All he has to do in order to view the data (in his own computer & sql-server) is:
SELECT convert( NVARCHAR(max), decryptbykey(namePAss)) FROM tbl1
Would he still be able to access the data?