0

This is not an issue, but more a Question on an unknown topic for me.

A client of mine has asked to Encrypt some columns in the database, but from the application, he might see the values of the columns.

Any idea on how to start making my plan for this?

3
  • 3
    Read about the "always encrypted" feature. It is designed for exactly this. Jul 24, 2023 at 12:26
  • give me time to implement always encrypted and i will revert. Seems the most suitable though. Jul 25, 2023 at 6:06
  • one more question, am i able to permanently decrypt the data and switch the always encrypted to off? Jul 25, 2023 at 9:47

1 Answer 1

1

Any idea on how to start making my plan for this?

Work with client about what are the threats you should protect the database.

always encrypted is great because it's the only feature to protect data from DBA (superuser) however it could break your application if it attempts to run inequality search for encrypted column.

Also encryption means someone have to manage encryption keys.

https://blog.netwrix.com/2019/06/13/sql-server-encryption-explained-tde-column-level-encryption-and-more/

2
  • can i encrypt columns from different tables within the same Encryption key? Jul 25, 2023 at 6:34
  • 1
    You are talking about DECRYPTBYKEY? Yes. you can
    – SergeyA
    Jul 25, 2023 at 14:09

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.