Questions tagged [encryption]
The conversion of data into a form that cannot be easily understood by unauthorized users.
0
votes
0answers
4 views
MariaDB Remote machine Data at rest encryption
I'm work on setting up a MariaDB local instance on laptops that will spend most of their time disconnected/unable to connect to the internet.
One of the requirements of the project is to encrypt ...
0
votes
0answers
5 views
Decrypt RSSD maint password in Replication Server version 15.7.1
Is anyone knows any possibilities to decrypt an encrypted RSSD maint password in the Replication Server configuration file?
Thanks in advance.
1
vote
1answer
21 views
Connection string for connecting mongo database with SSL enabled
Am facing some below problem in my mongodb replication environment
I have 3 replica set environment with SSL enabled and ssl mode as preferSSL
3 servers has 3 different Key file with common CA file
...
1
vote
1answer
113 views
I need help creating an encrypted listener for my 11gR2 database using a wallet and SHA1 encryption
We are using 11.2.0.4. Since Oracle connections are not encrypted by default and access personally identifiable ( PII ) data in our application we are required to go to an encrypted listener. I am ...
5
votes
1answer
36 views
Can I control which algorithm SQL Server uses to hash symmetric key passphrases
I will start by describing the issue / cause before asking my question:
If you are using a symmetric key in SQL to encrypt data.
This can be set up as follows:
CREATE MASTER KEY ENCRYPTION BY ...
1
vote
2answers
41 views
SQL Server Error Log - Is It / Can It Be Encrypted?
Is it possible for the SQL Server Error Logs to be encrypted?
Our SQL Server recently had a memory dump which it threw into the Error Log. While the dump was definitely useful to identify the issue,...
0
votes
0answers
15 views
Oracle Advanced Connection Security SQL
I am looking for a way to check the encryption and integrity protection level in effect for the current session. Is there a system view where I can get those details?
It would also be good if the ...
0
votes
1answer
23 views
ERROR: please confirm the keyfile is match and keyring plugin is loaded
I want to create a copy of my Production DB to a new instance.
There is a innobackupex running on the prod every night looks like this:
innobackupex --user=username --password=password --keyring-...
1
vote
1answer
29 views
Encrypting table in SQL Server [closed]
I'm a .NET guy that is trying to start using table encryption on some of my Users tables but I could do with some questions being answered first. I don't want just anyone to be able to see these ...
0
votes
1answer
45 views
sql server management studio enable encryption
I see that i can manage encryption through the option:
right click database->tasks->manage database encryption
I see two options using asymmetric key or certificate as shown below
but i don't see an ...
0
votes
1answer
55 views
Trigger to decrypt the Encrypted data in a column while it's being inserted [closed]
I have a table
TestTableDestination(SerialNumber (varchar) , Name(varchar))
When I want to insert in this table , I'm inserting the encrypted data. What I want to do is to write a trigger with ...
1
vote
1answer
42 views
Is it overkill to encrypt an already hashed BCrypt password?
I'm using BCrypt to hash my passwords on the server side. Before I store it in my MySQL database, would it be overkill to encrypt my hashed-BCrypt password or would storing the hash directly in the ...
-1
votes
1answer
28 views
Determining what user data fields to protect within a database?
Besides passwords, credit/debit card info, social security info, passport info, what other types of data fields should be hashed to give it an additional layer of protection within any database?
...
2
votes
1answer
53 views
Storing sensitive information in a SQL Server project
I am very new with encryption in SQL Server so I am stumbling over things that require prior experience. I have done my googling, but I need reassurance so here we go:
Scenario
I have a SQL Server ...
4
votes
1answer
231 views
How to send secure emails using sp_send_dbmail
When using sp_send_dbmail to send an email on SQL Server, how do you specify that the email be sent in an encrypted format?
I found a thread discussing including the string "[SECURE]" in the subject ...
0
votes
1answer
81 views
How to Oracle DBLink encryption
I have the environment that I explain below and I need to encrypt the data that is sent between my two nodes, I have been reading but I can not find the right solution, I explain:
I have an Oracle ...
2
votes
2answers
76 views
How to migrate a database that has a database master key and certificate for encryption
Morning y'all.
I'm a little stumped at this one. We have a database that we encrypted a column in a table. This is the master key that I created and the Certificate & Symmetric key. I need to ...
1
vote
1answer
28 views
Oracle RMAN encryption
I would like to know if it is possible given a certain backup made with RMAN in Oracle 12c is encrypted without having to restore said backup, is there any or some queries that verify if an RMAN ...
1
vote
1answer
130 views
How to stop decrypting data after opening master key in SQL Server?
I have implemented data encryption using SQL Server symmetric key encryption technique using a certificate, master key with password.
When we backup database from PROD server and restore to a ...
1
vote
1answer
27 views
What are implications for changing encryption from TRIPLE_DES to AES_128?
As title asks, what are implications for changing encryption from TRIPLE_DES to AES_128?
I have an older database I've been tasked with hardening, and I need to updated the algorithm used for ...
1
vote
0answers
404 views
Error during MySQL encryption, Code: 3185. “Can't find master key from keyring (…)”
I was trying to configure MySQL keyring plugin and I did the following:
• Made sure that keyring_file.dll is present either in C:\Program Files (x86)\MySQL\MySQL Server 5.7\lib\plugin directory.
• ...
2
votes
2answers
81 views
Performance Implications of encrypted data in a Clustered Columnstore Index
I am using SQL Server 2016 and expecting some details on below points regarding performance point of view:
Is there any performance gain or additional benefit on creating a primary key - unique ...
0
votes
0answers
91 views
When to run sp_refresh_parameter_encryption while using Always Encrypted?
I'm implementing Always Encrypted feature for an ASP.NET Application using SQL Server 2016. I have applied deterministic encryption on first five tables and created few stored procedures that ...
-1
votes
1answer
57 views
SQL Server Intellectual Property (Protecting DB Structure and Relations)
I would like to know is there any update about protecting DB Structure?
We deliver a licensed app that uses SQL as its main DBMS and we would like to lock the database structure (schema).
I know I ...
0
votes
1answer
45 views
How to configure/setup data at rest encryption in Couchbase 5.1 [closed]
I am evaluating best database solution for a sizeable application. My basic requirements include:
Data should be encrypted at disk level
Mobile support
Scalable
Enterprise support
I realized ...
2
votes
1answer
43 views
Difference between encrypted backup of an encrypted DB and an unencrypted backup of an encrypted DB
Let's say we have a fully encrypted database (the type of encryption is not considered in this scenario), and we produce two backups for that database.
If I encrypt only one of the backups, would ...
0
votes
1answer
161 views
SQL Server 2008 Database encryption
In my company there is MS SQL SERVER 2008 standard edition installed.
My problem is we want to encrypt whole database but in standard edition there is encryption like transparent-data-encryption(TDE) ...
2
votes
1answer
243 views
Issue Restoring Certificate to SQL Server When Different Service Account Used
I am attempting to configure backup encryption in SQL 2017 and have run into some problems.
I have no issues in creating the master key and certificate on one machine. Nor do I have a problem getting ...
0
votes
1answer
1k views
Always Encrypted: How to insert or update encrypted columns?
I have configured 'Always Encrypted' on one of the columns of a table of my SQL Server database. I am able to select and view data from client SSMS after passing the 'Column Encryption Setting = ...
0
votes
1answer
42 views
How to restore a database with SMK and Cerificate to another computer
On ComputerA, I have a database with SMK and a certificate. I've created this with the following code:
CREATE MASTER KEY ENCRYPTION BY PASSWORD = 'Password123';
GO
CREATE CERTIFICATE Certificate1
...
2
votes
1answer
142 views
How do I encrypt data to be decrypted on a linked server? SQL
I have been searching for 2 days for the solution to this, but every solution does not apply to my situation.
I have 2 SQL servers: DataServer and InterfaceServer set up as linked servers. DataServer ...
5
votes
1answer
83 views
Ola Hallengren: encrypt, but verify?
I've been using Ola Hallengren's scripts for a few years now, and a recent upgrade to MSSQL2017 has allowed me to start testing encrypted back-ups. Before anyone asks: yes, master keys and encryption ...
1
vote
1answer
270 views
Recreate symmetric key of unknown CREATE SYMMETRIC KEY
I found that for each encryption of a symmetric key an entry in sys.key_encryptions is present and at least for ENCRYPTION BY CERTIFICATE-type entries I can use the certificate of the specified ...
0
votes
0answers
72 views
MySQL generating keyring via UDF leads to SQLException
I am trying to encrypt my tables using a keyring plugin that MySQL suggested. In my /etc/my.cnf file, I have set the early-plugin flag as well as the location of the key ring file. It looks something ...
1
vote
2answers
254 views
Significantly Slower DB Dumps on AWS RDS After Turning on Encryption?
Turning on encryption on an AWS RDS MySQL instance results in significantly slower database dumps (using mysqldump).
mysqldump -u test -p -h xxx.aws.com > dump.sql
Is there a reason for ...
0
votes
0answers
51 views
Decrypt data (encrypted outside of SQL Server 2014) that used openssl
A client has a thorny problem.
Their client encrypted one column of a data file using openssl.
(Their client is a Linux based shop and they encrypted the column with openssl using AES 256 CBC.)
My ...
1
vote
1answer
100 views
Make encrypted differential backup to same media
I create encrypted backup as follow:
BACKUP DATABASE XXX
TO DISK = 'C:\Backup\XXX.bak'
WITH INIT, FORMAT,
ENCRYPTION (ALGORITHM = AES_256, SERVER CERTIFICATE = MyCertificate)
Then I try to ...
2
votes
1answer
30 views
SQL Server prevent SA from setting encryption off
Is there a way to prevent any user (including SA) from setting database encryption off (unless password or physical file - cert is provided)?
That is: not just some column or specific data - but ...
2
votes
1answer
41 views
how to encrypt one column of a table without using always encrypted?
I have been working on a solution to synchronise logins (using T-SQL) between 2 servers, or between AlwaysOn nodes, inspired by sqlsoldier.
It requires a linked Server.
When run, this procedure ...
0
votes
0answers
38 views
Import Column Master Key (CMK) in Amazon's KMS - need private key in binary format
We're testing an option for storing CMK from Always Encrypted SQL solution in Amazon network, in their Key Management Solution.
The problem is that in KMS I must provide a private key in binary ...
1
vote
2answers
141 views
Azure SQL Db Linked Server - Secured Connection Methods?
The developers want a linked server from our on-prem server to our Azure SQL Db (DBaaS) in order to complete a nightly data pull into our data warehouse.
I'd much rather go the route of SSIS but don'...
1
vote
1answer
171 views
Restore SQL Server DB encrypted by EKM - where's the asymmetric key?
MS is clear about restoring TDE backups: Certificate has to be restored on destination OR, in case of EKM, the asymmetric key
"
When moving a TDE protected database, you must also move the ...
0
votes
0answers
35 views
Reusability of encryption keys using Always Encrypted
Is it possible to reuse the encryption keys and/or certificate between two databases created on the same SQL Server?
I have two database which needs to be configured with AE. As of now, the first ...
1
vote
1answer
784 views
AES_DECRYPT Requires Cast?
I'm trying to use the AES_ENCRYPT and AES_DECRYPT functions. I've found an answer to my initial question which was how to decrypt the encrypted string, https://stackoverflow.com/questions/16556375/how-...
0
votes
1answer
133 views
Always Encrypted Certificate clarification
I have configured AE using SSMS on the database server installed with SQL Server 2016. The certificate created under Local Machine option displays the validity as one year.
I just want to know what ...
3
votes
1answer
386 views
How to create Always Encrypted Certificate for specific time period?
I have configured Always Encrypted on a custom database using SQL Server 2016. By default, it creates the certificate with a validity of one year.
Is there any workaround to create this certificate ...
0
votes
0answers
17 views
Exact encryption being used by Oracle 12
Working with an existing Oracle 12c database which has been configured for encrypted tables. Existing DBA says that it has been configured with AES256 CBC encryption. I was able to find the AES256 ...
4
votes
2answers
2k views
MySQL SSL error: Unable to get private key
Getting an error while trying to enable encryption:
[ERROR] SSL error: Unable to get private key from '/etc/mysql/ssl/nginx.key'
[Warning] Failed to set up SSL because of the following SSL library ...
4
votes
2answers
469 views
Can anyone recommend an encryption method for ALL user dbs using SQL Server 2016 STANDARD edition?
Our clients are insisting that we now encrypt ALL their SQL Server data at rest, which must include tempdb. I think I have the following options available –
Bitlocker entire drive(s)
TDE (but the ...
1
vote
0answers
20 views
Do any databases other than SAP ASE support key custodians?
SAP Sybase ASE supports the notion of a key custodian. This allows for a setup where the trust can be split between two roles: the database administrator and a key custodian. The database ...
