Questions tagged [encryption]
The conversion of data into a form that cannot be easily understood by unauthorized users.
376
questions
0
votes
2
answers
92
views
How Does a Database that Supports TDE Work In Practice?
I'm very curious on how does TDE is implemented in practice. My goal is to get understanding on the usability constraint and possibility performance impact of applying such technique.
Thus I'm trying ...
- 101
0
votes
1
answer
34
views
innodb_encrypt_tables = ON Convert table Collation
With Encryption at REST enabled on a MariaDB (10.4) database, can you change the Collation of all tables without unencrypting the database e.g:
alter table <some_table> convert to character set ...
0
votes
0
answers
39
views
Cannot find the symmetric key 'e1', because it does not exist or you do not have permission. (SQL Server 2019)
It seems to be a weird error, I have tried everything from giving Control, Alter, and View Definition permission on the symmetric key but nothing seems to work out.
Tried everything from this article.
...
0
votes
0
answers
19
views
Changing Encyption on Sql Server 2016 Column from Triple Des to AES256
In the process of changing encryption from Triple Des to AES 256. Have been advised to have keys for both available for clients on server until migration is complete. First question is can I have a ...
0
votes
1
answer
66
views
SQL Server Database Encryption (Column Level)
This is not an issue, but more a Question on an unknown topic for me.
A client of mine has asked to Encrypt some columns in the database, but from the application, he might see the values of the ...
- 28
1
vote
1
answer
142
views
SQL Server Encryption at rest for some rows of a database (SQL 2019 Std)
I'm looking for a solution to encrypt a portion of a database at rest. The database contains data from different companies that should be encrypted with separate keys.
So far, I've considered that TDE ...
- 121
-1
votes
1
answer
25
views
TDE setup with EMK in SQL SERVER 2019
We are implementing TDE in MS SQL SEREVR 2019 with EKM provider. We are using asymmetric key to encrypt the data at rest. Asymmetric key will be hosted in HSM appliances.
I have one questions ...
1
vote
0
answers
53
views
OPEN SYMMETRIC KEY from AKV takes too long randomly
This post is similar to another question listed here. Encrypting data by OPEN SYMMETRIC KEY by ASYMMETRIC KEY created with Azure provider in SQL server takes more than 2 min
We are also facing the ...
1
vote
1
answer
45
views
Unknown, Un-encryted Connections [duplicate]
We have SSL enabled on our SQL servers and our monitoring tool is alerting that there are unencrypted connections.
The check that monitors this runs every minute and uses the following query to check:
...
- 1,908
3
votes
1
answer
155
views
Visibility of the Code for a view depends on from where I connect on SQL server
My SQL Server admin and I are currently struggling with a strange issue. When I connect to the database from the same machine I cannot access a view definition, there is a message:
Property ...
- 131
3
votes
1
answer
210
views
Back up multiple databases to the same backup (BAK) file with encryption
I have a script that we run on an ad-hoc basis that grabs the names of 15 databases, then iterates through that list to backup each one into a single .BAK file. This is then downloaded for use ...
- 840
1
vote
0
answers
73
views
How to encrypt a production unencrypted RDS Aurora MySQL 8 cluster
I have a running RDS Aurora MySQL 8.0.23 cluster running in production. The database is unencrypted and I need to enable encryption for it. As far as I understand, this is not possible to do directly. ...
- 111
3
votes
1
answer
3k
views
TLS when connecting to SQL Server using "encrypt=false"
I'm trying to configure SQL Server 2017 Express Edition to use TLS 1.2 encryption, and accept connections from a simple test JDBC program. I'm reasonably experienced with java and MSSQL, but not so ...
- 33
0
votes
1
answer
167
views
How exactly are the password hashing functions in the pgcrypto module different from the regular MD5 and other algorithms?
This is not technically a database question, but about the innards of Postgres's pgcrypto extension.The documentation says
The algorithms in crypt() differ from the usual MD5 or SHA1 hashing
...
- 779
0
votes
0
answers
997
views
Postgres AES encryption with pgcrypto encrypt for text of length >15 characters is not compatible with other platforms
I am in a need of joining 2 tables with stringed identifiers, the key in first table is encrypted with AES ECB and the one in the second table is a raw form of that field in first table.
I am trying ...
- 101
1
vote
0
answers
86
views
TDE - Best Practices for Storing Master Database / TDE Database files and Backups
I have been doing some testing around TDE, in anticipation of enabling in my environments
I have TDE enabled on a database which means I cannot restore or attach this database to another server ...
- 1,908
0
votes
0
answers
96
views
Extract data from BKP file or verify if the backup is encrypted
A specific system, previously using a non encrypted Oracle 19 database, has been updated in such a way that now the database is encrypted (same Oracle version). I have successfully verified that the ...
- 101
2
votes
1
answer
740
views
Have to regenerate SQL Server Master Key after every server reboot
We recently migrated our database over from SQL Server 2012 to a new SQL Server 2019 box. As soon as the database was migrated, I regenerated the master key, but whenever our SQL Server 2019 box ...
0
votes
0
answers
159
views
Encrypting data by OPEN SYMMETRIC KEY by ASYMMETRIC KEY created with Azure provider in SQL server takes more than 2 min
Have created a SYMMETRIC KEY for decryption by ASYMMETRIC KEY and the ASYMMETRIC KEY is created with Azure keyvault based key provider. Have used the details provided from Here and Here
Have used the '...
- 103
0
votes
1
answer
62
views
How to encrypt database in SQL Server 2008 Express edition
There are times when I need to move a SQL Server 2008 Express database (I'm aware it is EOL) from one machine to another. In order to do that I need to implement a mechanism using C# to encrypt the ...
0
votes
1
answer
1k
views
Error creating ASYMMETRIC KEY - Cannot open session for cryptographic provider for SQL Server Cryptographic Provider for Azure Key Vault
I am creating an asymmetric key on the SQL Server database and have the SQL connector for Azure Key Vault installed and I am following the steps mentioned in the link setup steps for extensible key ...
- 103
1
vote
2
answers
323
views
Decrypt Symmetrically/Asymmetrically Encrypted Data in MS SQL (T-SQL) Server via Apex Crypto Class
Hope you're having a good day. This is in continuation to my previously posted question in Salesforce StackExchange. I was suggested to seek help at DBA SE in order to find a way to extract Symmetric ...
0
votes
1
answer
1k
views
Is the encryption of the password vault of MySql workbench secure enough?
MySql workbench stores passwords in a file called user_data.dat which is encrypted by default. But how strong is this encryption and what algorithm is used exactly? There are tools available on the ...
- 137
1
vote
1
answer
978
views
Understanding of database master key in SQL Server
Let's say I have a production server and I have a database master key ##MS_DatabaseMasterKey## (master_key1) on it. I created a certificate c1, which is encrypted by master_key1 by default. Then I ...
- 1,149
3
votes
1
answer
161
views
Why isn't database decryption working after failing over to the standby?
We added a new node (N2) to our SQL Server 2019 cluster. On existing N1, decryption queries works fine but when we failover to N2, decryption is failing. The database master key on N1 is encrypted by ...
- 31
0
votes
2
answers
1k
views
Postgresql : decrypt column only once when used in WHERE clause
I have the following request, using pg_trm and gin index:
SELECT
email,
first_name,
last_name
FROM external_patient
WHERE PGP_SYM_DECRYPT(cat_name::bytea, '...
0
votes
0
answers
111
views
When rebuilding sql server on a new machine, should SMK be restored prior to or after restoring system dbs?
Service Master key is at top of sql server encryption hierarchy. Linked server, credentials, database master key (if any) are encrypted using the service master key.
When rebuilding a sql server using ...
- 3,430
1
vote
1
answer
85
views
SSL Encryption for Kafka Pipelines
Any [SingleStore] users out there?
For enabling SSL encryption (only) for Kafka pipelines, we created the pipeline like below:
CREATE PIPELINE `kafka_ssl`
AS LOAD DATA KAFKA '<kafka-host>:<...
- 49
-1
votes
1
answer
113
views
What is the concept of service master key in FCI?
In a single sql server instances, sensitive data like passwords in linked server and credentials are encrypted using the server master key.
The key or objects can be decrypted only by the sql service ...
- 3,430
0
votes
0
answers
1k
views
An error occurred during service master key initialization (sql error log)
I have migrated sql server 2017 to new hardware. The sql error log shows following error log whenever the sql server service is restarted.
An error occurred during service master key initialization
I ...
- 3,430
0
votes
1
answer
62
views
How to test whether current sql engine service account can decrypt the SMK?
Is it true that when the sql service account is changed via the config manager then the new account can decrypt the SMK.
However if the change was made via the services.msc, then the new account doesn'...
- 3,430
0
votes
1
answer
617
views
How to decrypt zipped data in MSSQL table
We're trying to import (reverse engineer) some data from someone else's MS SQL database, without any vendor support.
In the past the data has been stored in either plain text or RTF so easy to extract....
- 13
2
votes
1
answer
656
views
How do I generate the private key needed to restore the encrypted backup?
I'm simulating the situation where I take a backup from instance A and restore it on instance B. I followed the doc to Backup to Disk with Encryption. Since I'm using only my desktop to simulate the ...
- 5,059
-2
votes
1
answer
223
views
Unknown database connections
an audit has highlighted some (apparently) unencrypted connections on one of our 2 nodes availability groups. The IP address (10.x.x.x) is the IP of the other node in the AG. Does anyone know what ...
- 1
1
vote
3
answers
342
views
Is there a way to add database encryption on certain columns without changing code base?
I've experienced a few companies that have various different codebases ranging from 20 year old code without the source anymore to 1 to 10 year old code with the source but thousands of database calls....
- 111
4
votes
1
answer
774
views
Can't restore a backup of database which has TDE enabled
I'm trying to restore the backup of database which has Transparent Data Encryption enabled. I have verified the certificate thumbprint in the backup file is the same as TDE certificate in [master] ...
- 76
1
vote
1
answer
627
views
Should a client connecting to a server via a unix-socket be encrypted?
Does a client connection need encryption if the only connection option is via unix socket? e.g. my.cnf
[mysqld]
socket = /run/mysqld/mysqld.sock
I'm considering these options, but I'd prefer not to ...
- 143
0
votes
1
answer
297
views
Detecting whether a varchar value is already encrypted by EncryptByPassPhrase() in SQL Server
Starting with a varchar(100) column named Password in a table Users with one record in it, after performing an update on the column to encrypt it with EncryptByPassPhrase() on the Password column the ...
- 153
0
votes
0
answers
58
views
Azure SQL Column encryption and backups
I am starting a project and for this project I need to encrypt columns containing PII Data in an Azure SQL database. As a developer, I have often handled this step in my code, but moving forward I ...
- 101
0
votes
1
answer
1k
views
Certificate (SHA1) loaded in a database but couldn't be found under SQL Configuration Manager and Key Registry
I have two instances on a server. sql 2014 (port 1433) and sql 2016 (port 50019)
I have a certificate with SHA1 algorithm on a server that is not expired.
**When sql server started I can clearly see ...
- 657
4
votes
1
answer
2k
views
Monitoring SQL Server Encryption With Extended Events
Is there a way to monitor for encrypted connections through Extended Events? I've monitored for TLS 1.0, 1.1 and 1.2 handshakes in the past using sqlsni.TRACE but cannot find something along the same ...
- 828
1
vote
1
answer
265
views
If I backup my Certificates, why do I need to backup the DMK?
If I have a server where I use TDE, configured as follows:
USE [master]
CREATE DATABASE MyTDE
CREATE MASTER KEY ENCRYPTION BY PASSWORD = 'My57r0ngp455';
CREATE CERTIFICATE MyTDECert WITH SUBJECT = '...
- 1,908
0
votes
1
answer
292
views
Secure MySQL database by encryption?
I have cloud webserver running ubuntu where a MySQL database is installed. The database has a table with sensitive data. To protect the data I would like to encrypt the database (or database content). ...
JavaForAndroid
-1
votes
1
answer
3k
views
To do encryption for postgresql db backup
Is this possible when someone takes backup of my postgres db it should be in encrypted form(i.e.if root user will access from command line(pg_dump) or from any tool). and how we can decrypt that ...
2
votes
0
answers
64
views
Using ADONET SqlClient library how to access the plain-text value of an encrypted column in SQL Server?
In a SQL Server 2017 database running on my development PC, a column in a particular table is encrypted with a column encryption key.
CREATE TABLE Test(
id int IDENTITY(1,1) NOT NULL PRIMARY ...
- 435
1
vote
2
answers
401
views
Best way to store encrypted API identifiers (MariaDB)
So for max security I have to encrypt some string keys which I need to call specific actions of an API, at a very regular basis of the use of an application, so performance should also be considered.
...
- 163
0
votes
1
answer
226
views
Data Encryption in MariaDB
It's the first time I'm using encryption in MariaDB, so I need to assure that I'm getting it right. I need to simply store some identifiers in an encrypted way, and am wondering if I'm doing it ...
- 163
4
votes
1
answer
1k
views
Load assembly from a certificate in SQL Server
We received an assembly from external vendor as
CREATE ASSEMBLY MYCALC_DLL
AUTHORIZATION dbo
FROM 0x42A728....<300,000 binary values>
WITH PERMISSION_SET = UNSAFE
GO
And this DLL is been ...
- 412
0
votes
3
answers
293
views
SQL Server TDE - encryption_state 2 stuck at 100% complete
I have enabled TDE on two databases.
One is around 700 GB and that completed over the night and has encryption_state=3
The other one is almost 2 TB. That one has encryption_state=2 and ...
- 11
0
votes
1
answer
429
views
Supported RSA Key Lengths for Encrypted SQL Connections
I'm having trouble finding any documentations regarding supported key lengths for RSA certs to encrypt SQL connections. Our internal CA is issuing certs with a 4096 key length and that seems to work ...
- 223