Questions tagged [encryption]
The conversion of data into a form that cannot be easily understood by unauthorized users.
342
questions
0
votes
0answers
35 views
How to get a encrypt information from a SSAS Database using Power BI?
I have a database encrypted in my SQL Server instance. To be specific,I used the feature 'Always Encrypted' to encrypt two columns from that database.
This database has a relation with a database with ...
2
votes
1answer
73 views
Load assembly from a certificate in SQL Server
We received an assembly from external vendor as
CREATE ASSEMBLY MYCALC_DLL
AUTHORIZATION dbo
FROM 0x42A728....<300,000 binary values>
WITH PERMISSION_SET = UNSAFE
GO
And this DLL is been ...
0
votes
3answers
58 views
SQL Server TDE - encryption_state 2 stuck at 100% complete
I have enabled TDE on two databases.
One is around 700 GB and that completed over the night and has encryption_state=3
The other one is almost 2 TB. That one has encryption_state=2 and ...
0
votes
1answer
32 views
Supported RSA Key Lengths for Encrypted SQL Connections
I'm having trouble finding any documentations regarding supported key lengths for RSA certs to encrypt SQL connections. Our internal CA is issuing certs with a 4096 key length and that seems to work ...
4
votes
1answer
1k views
Always backup database with encryption
Is there a way to force all database and log backups run on the server to be encrypted?
If encryption is not specified, the query will be terminated.
0
votes
0answers
39 views
MSSQL 2012 Update (or create new certificate with same name) that uses Symmetric Key encryption
Super short version of my question:
For a MSSQL 2012 DB is it possible to update the current certificate with a new expiry date and new PW (or create new certificate with same name)? Or some other ...
0
votes
0answers
32 views
SQL server encryption
i am using SQL server enterprise edition V.2019
i need to encrypt some columns
i liked IBM Guardium for File and Database Encryption but the cost is too high .
so i found some other solutions
1- SQL ...
1
vote
1answer
390 views
how to disable encryption on SQL server 2014 connection that SSL is enforced by windows
In windows 10 , Test connection with a udl file is successful. however, if "Use Encryption for data" was changed the to true. UDL Use Encryption the connection fail with error message:
"...
1
vote
1answer
70 views
Can PostgreSQL build an index without storing the source data?
In Elasticsearch we can configure an index to not store the source data. Is it possible to recreate this in PostgreSQL?
Today, we are building an application that encrypts all (sensitive) data before ...
0
votes
0answers
16 views
Using Master Key & Certificate on Always On Replica
Im running on a SQL 2017 Always On 14.0.3381.3 DB.
Im trying to use EncryptByKey and DecryptByKey feature to encrypt sensitive info in one column in one table.
I've created the MasterKey, Certificate ...
0
votes
0answers
48 views
Is offsite replication from MySQL AWS RDS with encrypted RDS storage possible? How?
AWS RDS for MySQL now supports encrypted storage backends. This encrypts the MySQL data and binlogs with a key within AWS's key management system, thus causing offsite replication issues because we ...
3
votes
1answer
129 views
Changing Database Encryption Keys
I have been asked to "rotate" the Certs and Keys for a given database and the only way I knew of to accomplish this was to unencrypt the data first, using DECRYPTION BY CERTIFICATE, create ...
4
votes
1answer
420 views
Database master key and certificate for backup encryption - SQL Server
I'm trying to understand backup encryption and I have created a master key (in the master DB) and used a password as follows:
USE master;
GO
CREATE MASTER KEY ENCRYPTION BY PASSWORD = 'test123!';
GO
...
0
votes
0answers
5 views
Load from column encrypted ASE database
ASE documents the process to export-import keys when we fully encrypt the database. Once imported, a create query with the same credential on a target allows load from the source database.
But in the ...
1
vote
1answer
61 views
SQL Server 2019 setting Force Encryption with a script
I have to update 50+ servers to use encrypted connection strings. Is there a way to script setting Force Encryption and TrustServerCertificate (e.g Powershell, or ???) so that I don't have to open ...
0
votes
0answers
79 views
Decrypt the DSN section of RsReportServer.config file
The DSN section of the RsReportServer.config file contains the encrypted connection string to the PowerBI Report server databases. I noticed that the DSN string changes everytime I make any changes ...
0
votes
2answers
41 views
Encrypt application name in c# and decrypt in SQL Server
I've encrypted application name in my c# app using MD5, so when constructing the connection string the application name is passed to SQL as encrypted. I would like to decrypt in SQL server the value ...
1
vote
1answer
81 views
Incremental encrypted per database backup and Partial restore policy for MySQL 5.7 in replication setup
I will run a replication cluster using MySQL 5.7 and I would like to set up for each database a backup policy that has a full once per day + incremental every N hours with data encrypted (based on the ...
1
vote
2answers
93 views
SQL Server CLE Encryption Implementation
We got instruction from HQ to implement encryption on our database. The reason be, should a client gets hacked, the hackers cannot access personal info such as names, phone numbers, addresses, etc.
I ...
0
votes
1answer
36 views
MySQL Security - Is there an easy way to encrypt a confidential data and also that it cannot view or access by DBA?
Is there an easy way on how can I encrypt a data and store it MySQL database and also it also cannot be viewed by dba?
0
votes
0answers
79 views
Always Encrypted on SQL Server LINUX
We can achieve Always Encrypted on Windows Server Machine using SSMS on my Application Server and if Database Server too want to view the encrypted column, we can always transfer the certificate from ...
-1
votes
1answer
47 views
Setting up encryption on a SQL2012 Database - how to?
I am not really a DBA, but I have a requirement to set up NIST-approved Encryption on some databases.
Looking around online, there appears to be a few varieties of Encryption for SQL, but the terms ...
3
votes
1answer
367 views
SSISDB master key in an Availability Group
I activated Always On support for SSIS and everything works fine until a fail over operation happens. Turns out the secondary nodes have a different service master key than the primary node and after ...
0
votes
0answers
90 views
What does MariaDB use for an encryption initialisation vector?
I have been using MySQL 5.6 in development environment and MariaDB 5.6 in production until I needed to use encryption. MySQL 5.6 has multiple encryption modes and allows AES-256-CBC. MariaDB 5.6 only ...
1
vote
1answer
1k views
How to configure TCPS in JDBC thin client for oracle
An Java Application running with JDBC thin wtih TCP connection, Now require is to convert in TCPS for encryption transmission from application to database.
String url = "jdbc:oracle:thin:@(...
0
votes
1answer
131 views
Encryption Test
I'm using PostgreSQL-11 and I've been given a text string to decrypt as a test. I've got the details of how it was encrypted and its very simple. When I try to decrypt using select pgp_sym_decrypt(...
0
votes
0answers
88 views
JSONB encryption of specific elements
I have a JSONB object containing lots of elements and nested objects, and some of the elements are to be encrypted, e.g.:
jsonb_obj = '{"obj1" : {"obj2": {"firstname":&...
0
votes
0answers
223 views
Postgres SQL CPU and RAM optimisation to improve decryption performance with pg_crypto
I am currently working on an application that requires column-based decryption for a few thousand of rows on a regular basis. The queries are decrypted using pgp_sym_decrypt, where several columns are ...
0
votes
1answer
50 views
Can I hide my password for data at rest encryption key?
For MariaDB encryption at-rest, my setting is
[mysqld]
# at-rest encryption
plugin_load_add = file_key_management
file_key_management_filename = /etc/mysql/rest/keyfile.enc
...
0
votes
1answer
63 views
What is the point of encryption at rest?
I am wondering what is the point of encryption at rest?
It is said that a hacker cannot steal the database and look through it. I'm afraid that it does not protect the database while the key is stored ...
0
votes
0answers
255 views
Why does Back Up Database Task fail to connect when Force Protocol Encryption is enabled on MS SQL Server 2019?
I have MS SQL Server 2019 where encrypted connections have been enabled. A certificate has been issued and installed on the server. In addition, I have also enabled Force Protocol Encryption in SQL ...
2
votes
0answers
84 views
Schema level encryption in Postgres
A multi-tenancy approach for many webapps is to use a separate PostgreSQL schema for each tenant.
In addition to permissions and access controls, is it possible to encrypt a tenant's whole schema ...
0
votes
1answer
15 views
Encrypt backup in 2008 R2
Is it possible to encrypt 2008 R2 backups like TDE for instance?
What I've read is encrypting the whole database and that way the backups will be encrypted. But can you have TDE encrypted backups ...
-1
votes
1answer
68 views
Where does data sit and where must it be encrypted
what is does it mean when data-at-rest is not encrypted at the datacenter. Does this mean that the data sitting in the database is not encrypted?
I am just trying to understand if data sits on the ...
0
votes
0answers
21 views
Can InnoDB data at rest encryption be overriden
I am exploring options for distributing a MySQL/MariaDB database with my app. I want to ensure users (even the root user) cannot view or manipulate data in my database/tables. Recent releases of ...
0
votes
1answer
35 views
Is there a way of securing ProxySQL's own SQLite3 database?
As I understand ProxySQL has support for SSL encryption for inbound and outbound traffic (front/backend) and supports password hashing. However back in 2017, one had direct database access:
How to ...
-1
votes
1answer
71 views
how to put encryption in place while creating db link between on premise db 12c and cloud db 11g
we need to create db link between our db on premise and our medical db on oracle cloud. Our main concern is the data encryption while data transfer happen. Need a solution.
2
votes
1answer
122 views
ola-hallengren backup solution with encryption is not encrypting
Installed OH's scripts and they run great. sqlserver 2017 standard edition in a testing/dev environment. testing before rolling out to production.
I did a test of a restoration of an encrypted, or so ...
0
votes
1answer
197 views
For SSL renewal procedure in Db2 LUW , DO i need to create CSR request for each instance residing in same server?
I am trying to renew my SSL certs . Stuck here if we need to have create a Certificate Signing Request for each instance residing on the same server and send it to CA who will provide us the ...
0
votes
0answers
149 views
What is the best way or alternative for indexing an encrypted column in MySQL?
So in Oracle, one can use function indexes. MySQL unfortunately, does not have function indexes (as far as I know). Can someone share how they were successfully able to optimize a query that ...
0
votes
0answers
125 views
How to decrypt aes-128-ecb data in postgresql? [duplicate]
I am looking for a way to decrypt aes that was encrypted earlier in mysql and then migrated to postgresql. In mysql I used standard aes_encrypt with block encryption mode aes-128-ecb, but I can't seem ...
3
votes
1answer
818 views
Always Encrypted: How do I do an equality join with a non-encrypted column to a deterministic encrypted column?
The official Microsoft documentation for Always Encrypted on SQL Server 2017 states:
Deterministic encryption always generates the same encrypted value for any given plain text value.
Using ...
0
votes
0answers
40 views
Can we apply database encryption in mongodb community edition?
I know there's features in mongodb Entreprise edition that allow encryption. I'm using mongodb community edition for personal project and i want to keep my database safe and encrypted.
Is there any ...
0
votes
1answer
84 views
How to deny viewing definition of server level trigger?
I have several server level triggers, that I want users to deny viewing definition of. I control server level permissions, users aren't sysadmins etc.
I've tried 2 options:
DENY VIEW ANY DEFINITION ...
1
vote
2answers
1k views
Converting MySQL AES_DECRYPT() to Postgres decrypt()
I have this MySQL query using AES_DECRYPT() that is the following:
SELECT *
FROM data_tbl
WHERE AES_DECRYPT(data_point,'aBcDeF')='data_1';
I've figured out as much that the equivalent in Postgres ...
0
votes
0answers
29 views
Hardening WITH ENCRYPTION option for stored procedure protection
Is there any way for make WITH ENCRYPTION option more difficult to bypass ?
I have to protect the stored procedures code and hide it from other sysadmin of the instance.
I can't manage it with ...
1
vote
1answer
466 views
SQL Server Encrypted Connections - Configuration Manager does not see Certificate
My goal is to implement encrypted connections on Test SQL Server instance
First, tried to create self-signed certificate in the Certificates snap in (certlm.msc), Personal > All Tasks > Request New ...
3
votes
0answers
43 views
Is it possible to log whenever someone decrypts a credit card in MSSQL 2012?
All of our credit cards are encrypted. The process to decrypt them is to Open the symmetric key and decrypt the data by certificate.
Is it possible to add a trigger on something in the process to ...
0
votes
2answers
149 views
Encoding issue mysql
I'm using the MD5 hash function of MySQL to hash some data I import into the database from a CSV file.
The issue is that some lines have an incorrect hash (but not all of them).
When I use a query:
...
1
vote
0answers
14 views
Elastic queries with encrypted columns in tables using symmetric keys
I have elastic queries running cross-subscription for everything except tables with encryption.
Now I need to tackle tables that are encrypted.
How (if at all possible) do I open the keys on the ...
