Timeline for How can we decrypt data knowing the symmetric key used for the encryption?
Current License: CC BY-SA 3.0
9 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Sep 4, 2018 at 7:03 | comment | added | gotqn |
Always Encrypted looks promising - we have try to implement it for few months but it was not possible as it is not flexible feature, there are many limitations and too complicated to setup it. We end up using symmetric keys for encryption and the goal was to have the sensitive data encrypted in rest, so everything is fine for now.
|
|
| Mar 30, 2018 at 20:29 | comment | added | Sean Gallardy | @gotqn If you're worried about stealing of database backups, files, or bad apple admins then I'd suggest Always Encrypted. | |
| Mar 30, 2018 at 16:41 | comment | added | Sean Gallardy | @gotqn That's not true, by default the DMK is protected by the SMK, however a password can be added and the SMK protection removed if inclined to do so. | |
| Mar 30, 2018 at 12:51 | comment | added | gotqn |
The Database Master Key DMK can be encrypted only with password. You are not to allowed to protect it with other technique - learn.microsoft.com/en-us/sql/t-sql/statements/…. The article suppose you have access to the system views - if you can restore a database on your local laptop you will be sysadmin and will be able to query the keys - for example in my case, I have DMK -> Certificate -> SK
|
|
| Mar 30, 2018 at 12:20 | comment | added | Sean Gallardy | @gotqn If the symmetric key is encrypted by the DMK and the DMK is encrypted by the SMK then no, just restoring the database won't "give them" the decrypted key unless they get the SMK with it. Again, something the article doesn't bring up. Now, if you use a symmetric key with a PW and put the plain text PW in a stored procedure or something - yes, but that's on you for putting it in plain text. | |
| Mar 30, 2018 at 11:27 | comment | added | gotqn | The above seems reasonable if you are sure that a database/backup can not leave your storage. If someone has your database backup for example, he/she will be able to restore it, make their account sys.admin and having access to the symmetric keys decrypt all your data. So, in such case do not knowing the mater key or the certificate protecting the keys, cannot stop the attacker. | |
| Mar 26, 2018 at 13:56 | vote | accept | gotqn | ||
| Mar 26, 2018 at 13:45 | vote | accept | gotqn | ||
| Mar 26, 2018 at 13:54 | |||||
| Mar 26, 2018 at 13:14 | history | answered | Sean Gallardy | CC BY-SA 3.0 |