Questions tagged [encryption]

The conversion of data into a form that cannot be easily understood by unauthorized users.

Filter by
Sorted by
Tagged with
1
vote
1answer
21 views

Master Key vs Password Certificate Encryption in SQL Server

We can encrypt certificates in SQL both by the database master key, and the other option is by password. I want to know the advantages and disadvantages of DMK encryption. Does password usage make the ...
1
vote
1answer
37 views

When is Service Master Key Exactly generated?

As it is created automatically, on Microsoft official source it says during setup. but in the 70-764 official exam prep book page 18, also there is another non official blog which say Any time ...
1
vote
0answers
66 views

SQL Server Security - Encryption

I have requirement to store the some sensitive information in SQL Server 2016. Organization policy demands, it should be encrypted. Business Requirement: Data cannot be decrypted by DBA. Data cannot ...
0
votes
1answer
35 views

How can I decrypt data on a replicated MSSQL database?

I have a database which uses a symmetric key to encrypt a credit card field. There is a trigger on the credit_card field which runs every time it is updated, to encrypt the contents, and save it to ...
1
vote
1answer
21 views

Verifying Oracle 12 client server encryption [closed]

I'm getting conflicting information on whether encryption is active between my Oracle server and a Linux client: SQL> select NETWORK_SERVICE_BANNER from v$session_connect_info where SID = ...
1
vote
1answer
39 views

Why does setting my column as Always Encrypted change its collation from SQL_Latin1_General_CP1_CI_AS to Latin1_General_BIN2?

I am encrypting a VARCHAR(50) NULL column as randomized. When doing this, the collation is changed from SQL_Latin1_General_CP1_CI_AS to Latin1_General_BIN2. I cannot find any resources explaining why ...
3
votes
2answers
60 views

Can only specific SQL users be forced to use TLS?

My school would like to develop custom software for some embedded devices. As part of this, we may need the devices to connect to an SQL Server instance. Is it possible to force specific SQL users to ...
0
votes
0answers
22 views

Azure Database Encryption (ERROR ON WEB APP)

Currently I have an azure subscription which has a server and database. I already encrypt a column in a table. i am using "always encrypted" method. Now I want to generate a .pfx file after I ...
0
votes
0answers
18 views

Azure sql database backup and exporting data-tier application

Currently i have an azure subscription in it has a server and a database. How could i setup azure SQL database backups that will run automatically for example every 15 mins? is there a way? if yes ...
2
votes
1answer
76 views

Troubleshooting a slow performing encrypted stored procedure

I have a stored procedure which is part of a vendor supplied system. The stored procedure is encrypted so we can't see the code. The stored procedure has all of a sudden started to run slow. The ...
0
votes
1answer
16 views

Best Approach for PII and Databases

PII, or Personally Identifiable Information, involves information that may include the following, among other data: First Name Last Name Email Address Phone (any of them) Billing Address Shipping ...
1
vote
0answers
60 views

How to find out everything that is affected by a master key?

Following up after a situation on an important LIVE server - where I have the master key backed up, but the decryption password for that master key backup file is missing. I can't open the master ...
1
vote
0answers
64 views

How to encrypt a column using aes-256-gcm encryption in PostgreSQL?

As a database point person, I am required to encrypt SSN numbers wherever they are in a table. We use PostgreSQL. My application counterparts require that we use the AES-256-GCM encryption algorithm. ...
0
votes
0answers
48 views

How to resolve an SQL Server “Target principal name is incorrect” error invoked after upgrading from SQL Server 2016 to 2017?

I am experiencing a "Target principal name is incorrect" error after upgrading SQL Server 2016 to 2017. The SQL Server 2016 instance has been uninstalled. The certificate which is registered in SQL ...
5
votes
2answers
72 views

Changing a certifcate+key algorithm by dropping & recreating with the same names

We have a situation where a symmetric key has been created (a long time ago) using TRIPLE_DES. This is used to encrypt a password column, and is used by around ten stored procedures (that utilizes ...
1
vote
1answer
29 views

Which account should be used for the SQL Server Service logon account where the server has been added to a domain?

I have installed SQL Server 2017 Express onto Windows Server 2012 R2. I need to add a self signed certificate to SQL Server Protocols in order to enable wire encryption. This comes with a requirement ...
0
votes
0answers
20 views

Azure SQL Database encryption

Currently i have an azure subscription in it has a server and a database. How could i encrypt an SQL azure table and when the encryption is done i can still insert some data on the table? I already ...
5
votes
2answers
366 views

How encryption in SQL login authentication works

I am going through the below link https://docs.microsoft.com/en-us/dotnet/framework/data/adonet/sql/authentication-in-sql-server and in that it says When SQL Server logins are used, SQL Server ...
0
votes
2answers
64 views

SQL database scripts in EXE or DLL format

I work with SQL Server 2016 and I will need to send the generated scripts in some releases to our client, so they can install the package in UAT and Production. I would like to send the scripts in DLL ...
2
votes
2answers
52 views

If database is compromised and downloaded, does it matter if user passwords are hashed?

I'm currently implementing as much security into a web app as possible, but I can't stop thinking about the database itself. For all the security I implement, such as salting and hashing passwords in ...
1
vote
1answer
60 views

How to setup encryption on a column that joins two tables in two different databases

What is the best method to encrypt a column that exists in two tables (BUID) in two different database on a 2012 server, at the end should be able to join on the encrypted columns between two tables ...
0
votes
0answers
62 views

ENCRYPTBYKEY produces duplicate values when a WHERE clause is used

Below is my code: UPDATE MyTable SET EncryptedCol = ENCRYPTBYKEY(KEY_GUID('MyKey'), '0') WHERE MyFlag = 0x0 -- This causes every row to have the same encrypted value Without the WHERE clause every ...
1
vote
1answer
444 views

How to change SQL Server master key password?

I created a master key, then a certificate and encrypted my database. CREATE MASTER KEY ENCRYPTION BY PASSWORD='A Very Strong Password'; GO CREATE CERTIFICATE foo WITH SUBJECT='Database Encryption ...
0
votes
1answer
29 views

Non-priviledge way to restrict UPD/DEL to user knowing certificate pass

I am assigned to researching column-level encryption, with the additional requirement of the sa not being able to read the encryted column(s). The idea as I've read in this DBSE post is to create a ...
0
votes
0answers
41 views

Encrypting a Database (mariadb/mysql) With Veracrypt

as explained in this question I created a mysql (mariadb) database in a separate volume. In my case it is a veracrypt container. Even after changing ownership of the mounted folder to mysql, and ...
0
votes
1answer
26 views

How to encrypt/secure single columns ins SQL Server?

I would like to secure some columns in my data warehouse. People who are generally allowed to query the database should get returned the columns but encoded. For example: SELECT PERSON_ID FROM PERSON ...
0
votes
1answer
106 views

MariaDB Encryption - unknown variable 'plugin-load-add=file_key_management.dll'

I'm really new to MariaDB and I need to set up encryption at rest. I'm running MariaDB 10.3 on Windows Svr 2012R2. I have created a key and added the following to my config file (my.ini) plugin-load-...
2
votes
1answer
46 views

Creating encrypted backups inhouse to be restored at client

I am trying to understand the mechanics of database backup encryptions, but there are some issues, which I can't seem to wrap my head around. I have 2 requirements: I need to be able to create and ...
0
votes
1answer
25 views

Question about encrypting multiple MariaDB schemas on the same server

I have 1 server running 1 installation of MariaDB In that installation of MariaDB, I have a CustomerService database and WorkFlow database. Can I encrypt CustomerService with one key and WorkFlow ...
0
votes
1answer
63 views

How to install keyring_aws plugin in MySQL?

I am looking for a way to install keyring_aws plugin in mysql community edition. Is it possible? I gone through couple of docs, https://dev.mysql.com/doc/refman/5.7/en/keyring-aws-plugin.html ...
1
vote
1answer
44 views

SQL Server TDE - Database backups and post restore behaviour

Below is my SQL Server details: SQL Server 2014 Enterprise SP2 GDR with Availability Group configured. List item NOTE: The Databases are FileStream Enabled. Below are the series of actions I did ...
0
votes
1answer
36 views

PostgreSQL's PGP_SYM_ENCRYPT log security

In one of our project, I tried to use PostgreSQL's security extension pgcrypto. I found that is function, PGP_SYM_ENCRYPT is quite handy. Using this function enable me to query encrypted data with ...
0
votes
0answers
49 views

Always Encrypted returning Timeout error

I am trying to encrypt a number of tables (1 column in multiple tables) in two different databases. On Database A I manage to encrypt these, while on database B it fails with an error: 'Unable to ...
1
vote
1answer
68 views

Clarifications on Transparent Data Encryption

This is the first time we are applying TDE on production databases that are critical and I have the questions below. While TDE is in progress: Can we still access the application that is working on ...
-2
votes
2answers
94 views

Need to encrypt the database files and backup files [closed]

Our requirement is that the data at rest is to be encrypted. MDF/LDF files to be encrypted, backup files to be encrypted. I found 3 options. We use Sql Server 2016 (SP1) Always encrypted AppScan EFS (...
0
votes
1answer
31 views

Native MariaDb encryption and clustering

Is native (table/Column/tablespace) database encryption possible in a clustered environment. The success criteria would be: Encrypted Logs Encryption in transit for all data protocols Native DB ...
0
votes
0answers
24 views

MariaDB Remote machine Data at rest encryption

I'm work on setting up a MariaDB local instance on laptops that will spend most of their time disconnected/unable to connect to the internet. One of the requirements of the project is to encrypt ...
0
votes
0answers
16 views

Decrypt RSSD maint password in Replication Server version 15.7.1

Is anyone knows any possibilities to decrypt an encrypted RSSD maint password in the Replication Server configuration file? Thanks in advance.
1
vote
1answer
175 views

Connection string for connecting mongo database with SSL enabled

Am facing some below problem in my mongodb replication environment I have 3 replica set environment with SSL enabled and ssl mode as preferSSL 3 servers has 3 different Key file with common CA file ...
1
vote
1answer
236 views

I need help creating an encrypted listener for my 11gR2 database using a wallet and SHA1 encryption

We are using 11.2.0.4. Since Oracle connections are not encrypted by default and access personally identifiable ( PII ) data in our application we are required to go to an encrypted listener. I am ...
5
votes
1answer
158 views

Can I control which algorithm SQL Server uses to hash symmetric key passphrases

I will start by describing the issue / cause before asking my question: If you are using a symmetric key in SQL to encrypt data. This can be set up as follows: CREATE MASTER KEY ENCRYPTION BY ...
1
vote
2answers
54 views

SQL Server Error Log - Is It / Can It Be Encrypted?

Is it possible for the SQL Server Error Logs to be encrypted? Our SQL Server recently had a memory dump which it threw into the Error Log. While the dump was definitely useful to identify the issue,...
0
votes
0answers
20 views

Oracle Advanced Connection Security SQL

I am looking for a way to check the encryption and integrity protection level in effect for the current session. Is there a system view where I can get those details? It would also be good if the ...
0
votes
1answer
90 views

ERROR: please confirm the keyfile is match and keyring plugin is loaded

I want to create a copy of my Production DB to a new instance. There is a innobackupex running on the prod every night looks like this: innobackupex --user=username --password=password --keyring-...
1
vote
1answer
38 views

Encrypting table in SQL Server [closed]

I'm a .NET guy that is trying to start using table encryption on some of my Users tables but I could do with some questions being answered first. I don't want just anyone to be able to see these ...
0
votes
1answer
134 views

sql server management studio enable encryption

I see that i can manage encryption through the option: right click database->tasks->manage database encryption I see two options using asymmetric key or certificate as shown below but i don't see an ...
0
votes
1answer
307 views

Trigger to decrypt the Encrypted data in a column while it's being inserted [closed]

I have a table TestTableDestination(SerialNumber (varchar) , Name(varchar)) When I want to insert in this table , I'm inserting the encrypted data. What I want to do is to write a trigger with ...
1
vote
1answer
357 views

Is it overkill to encrypt an already hashed BCrypt password?

I'm using BCrypt to hash my passwords on the server side. Before I store it in my MySQL database, would it be overkill to encrypt my hashed-BCrypt password or would storing the hash directly in the ...
-1
votes
1answer
32 views

Determining what user data fields to protect within a database?

Besides passwords, credit/debit card info, social security info, passport info, what other types of data fields should be hashed to give it an additional layer of protection within any database? ...
2
votes
1answer
140 views

Storing sensitive information in a SQL Server project

I am very new with encryption in SQL Server so I am stumbling over things that require prior experience. I have done my googling, but I need reassurance so here we go: Scenario I have a SQL Server ...