Questions tagged [encryption]
The conversion of data into a form that cannot be easily understood by unauthorized users.
0
votes
1answer
27 views
Non-priviledge way to restrict UPD/DEL to user knowing certificate pass
I am assigned to researching column-level encryption, with the additional requirement of the sa not being able to read the encryted column(s).
The idea as I've read in this DBSE post is to create a ...
0
votes
0answers
22 views
Encrypting a Database (mariadb/mysql) With Veracrypt
as explained in this question I created a mysql (mariadb) database in a separate volume. In my case it is a veracrypt container.
Even after changing ownership of the mounted folder to mysql, and ...
0
votes
0answers
11 views
Encrypting File Sytem for FileStream Folders _ Using existing free space for EFS Processing
Can any one help me on below case related to EFS for File Stream folders.
I am with SQL Server 2014 SP2 and Availability groups on Windows Server 2012 R2 Standard.
I have 800 GB of FileStream ...
0
votes
1answer
22 views
How to encrypt/secure single columns ins SQL Server?
I would like to secure some columns in my data warehouse. People who are generally allowed to query the database should get returned the columns but encoded. For example:
SELECT PERSON_ID FROM PERSON
...
0
votes
0answers
10 views
MariaDB Encryption - unknown variable 'plugin-load-add=file_key_management.dll'
I'm really new to MariaDB and I need to set up encryption at rest. I'm running MariaDB 10.3 on Windows Svr 2012R2.
I have created a key and added the following to my config file (my.ini)
plugin-load-...
2
votes
1answer
37 views
Creating encrypted backups inhouse to be restored at client
I am trying to understand the mechanics of database backup encryptions, but there are some issues, which I can't seem to wrap my head around. I have 2 requirements:
I need to be able to create and ...
0
votes
1answer
22 views
Question about encrypting multiple MariaDB schemas on the same server
I have 1 server running 1 installation of MariaDB
In that installation of MariaDB, I have a CustomerService database and WorkFlow database.
Can I encrypt CustomerService with one key and WorkFlow ...
0
votes
1answer
18 views
How to install keyring_aws plugin in MySQL?
I am looking for a way to install keyring_aws plugin in mysql community edition.
Is it possible?
I gone through couple of docs,
https://dev.mysql.com/doc/refman/5.7/en/keyring-aws-plugin.html
...
1
vote
1answer
34 views
SQL Server TDE - Database backups and post restore behaviour
Below is my SQL Server details:
SQL Server 2014 Enterprise SP2 GDR with Availability Group configured.
List item
NOTE: The Databases are FileStream Enabled.
Below are the series of actions I did ...
0
votes
1answer
15 views
PostgreSQL's PGP_SYM_ENCRYPT log security
In one of our project, I tried to use PostgreSQL's security extension pgcrypto. I found that is function, PGP_SYM_ENCRYPT is quite handy. Using this function enable me to query encrypted data with ...
0
votes
0answers
35 views
Always Encrypted returning Timeout error
I am trying to encrypt a number of tables (1 column in multiple tables) in two different databases. On Database A I manage to encrypt these, while on database B it fails with an error: 'Unable to ...
1
vote
1answer
56 views
Clarifications on Transparent Data Encryption
This is the first time we are applying TDE on production databases that are critical and I have the questions below.
While TDE is in progress:
Can we still access the application that is working on ...
-2
votes
2answers
77 views
Need to encrypt the database files and backup files [closed]
Our requirement is that the data at rest is to be encrypted. MDF/LDF files to be encrypted, backup files to be encrypted. I found 3 options. We use Sql Server 2016 (SP1)
Always encrypted
AppScan EFS (...
0
votes
1answer
21 views
Native MariaDb encryption and clustering
Is native (table/Column/tablespace) database encryption possible in a clustered environment. The success criteria would be:
Encrypted Logs
Encryption in transit for all data protocols
Native DB ...
0
votes
0answers
19 views
MariaDB Remote machine Data at rest encryption
I'm work on setting up a MariaDB local instance on laptops that will spend most of their time disconnected/unable to connect to the internet.
One of the requirements of the project is to encrypt ...
0
votes
0answers
10 views
Decrypt RSSD maint password in Replication Server version 15.7.1
Is anyone knows any possibilities to decrypt an encrypted RSSD maint password in the Replication Server configuration file?
Thanks in advance.
1
vote
1answer
35 views
Connection string for connecting mongo database with SSL enabled
Am facing some below problem in my mongodb replication environment
I have 3 replica set environment with SSL enabled and ssl mode as preferSSL
3 servers has 3 different Key file with common CA file
...
1
vote
1answer
142 views
I need help creating an encrypted listener for my 11gR2 database using a wallet and SHA1 encryption
We are using 11.2.0.4. Since Oracle connections are not encrypted by default and access personally identifiable ( PII ) data in our application we are required to go to an encrypted listener. I am ...
5
votes
1answer
71 views
Can I control which algorithm SQL Server uses to hash symmetric key passphrases
I will start by describing the issue / cause before asking my question:
If you are using a symmetric key in SQL to encrypt data.
This can be set up as follows:
CREATE MASTER KEY ENCRYPTION BY ...
1
vote
2answers
46 views
SQL Server Error Log - Is It / Can It Be Encrypted?
Is it possible for the SQL Server Error Logs to be encrypted?
Our SQL Server recently had a memory dump which it threw into the Error Log. While the dump was definitely useful to identify the issue,...
0
votes
0answers
17 views
Oracle Advanced Connection Security SQL
I am looking for a way to check the encryption and integrity protection level in effect for the current session. Is there a system view where I can get those details?
It would also be good if the ...
0
votes
1answer
41 views
ERROR: please confirm the keyfile is match and keyring plugin is loaded
I want to create a copy of my Production DB to a new instance.
There is a innobackupex running on the prod every night looks like this:
innobackupex --user=username --password=password --keyring-...
1
vote
1answer
32 views
Encrypting table in SQL Server [closed]
I'm a .NET guy that is trying to start using table encryption on some of my Users tables but I could do with some questions being answered first. I don't want just anyone to be able to see these ...
0
votes
1answer
65 views
sql server management studio enable encryption
I see that i can manage encryption through the option:
right click database->tasks->manage database encryption
I see two options using asymmetric key or certificate as shown below
but i don't see an ...
0
votes
1answer
108 views
Trigger to decrypt the Encrypted data in a column while it's being inserted [closed]
I have a table
TestTableDestination(SerialNumber (varchar) , Name(varchar))
When I want to insert in this table , I'm inserting the encrypted data. What I want to do is to write a trigger with ...
1
vote
1answer
151 views
Is it overkill to encrypt an already hashed BCrypt password?
I'm using BCrypt to hash my passwords on the server side. Before I store it in my MySQL database, would it be overkill to encrypt my hashed-BCrypt password or would storing the hash directly in the ...
-1
votes
1answer
29 views
Determining what user data fields to protect within a database?
Besides passwords, credit/debit card info, social security info, passport info, what other types of data fields should be hashed to give it an additional layer of protection within any database?
...
2
votes
1answer
71 views
Storing sensitive information in a SQL Server project
I am very new with encryption in SQL Server so I am stumbling over things that require prior experience. I have done my googling, but I need reassurance so here we go:
Scenario
I have a SQL Server ...
4
votes
1answer
286 views
How to send secure emails using sp_send_dbmail
When using sp_send_dbmail to send an email on SQL Server, how do you specify that the email be sent in an encrypted format?
I found a thread discussing including the string "[SECURE]" in the subject ...
0
votes
1answer
237 views
How to Oracle DBLink encryption
I have the environment that I explain below and I need to encrypt the data that is sent between my two nodes, I have been reading but I can not find the right solution, I explain:
I have an Oracle ...
2
votes
2answers
220 views
How to migrate a database that has a database master key and certificate for encryption
Morning y'all.
I'm a little stumped at this one. We have a database that we encrypted a column in a table. This is the master key that I created and the Certificate & Symmetric key. I need to ...
1
vote
1answer
31 views
Oracle RMAN encryption
I would like to know if it is possible given a certain backup made with RMAN in Oracle 12c is encrypted without having to restore said backup, is there any or some queries that verify if an RMAN ...
1
vote
1answer
148 views
How to stop decrypting data after opening master key in SQL Server?
I have implemented data encryption using SQL Server symmetric key encryption technique using a certificate, master key with password.
When we backup database from PROD server and restore to a ...
1
vote
1answer
29 views
What are implications for changing encryption from TRIPLE_DES to AES_128?
As title asks, what are implications for changing encryption from TRIPLE_DES to AES_128?
I have an older database I've been tasked with hardening, and I need to updated the algorithm used for ...
2
votes
0answers
696 views
Error during MySQL encryption, Code: 3185. “Can't find master key from keyring (…)”
I was trying to configure MySQL keyring plugin and I did the following:
• Made sure that keyring_file.dll is present either in C:\Program Files (x86)\MySQL\MySQL Server 5.7\lib\plugin directory.
• ...
2
votes
2answers
97 views
Performance Implications of encrypted data in a Clustered Columnstore Index
I am using SQL Server 2016 and expecting some details on below points regarding performance point of view:
Is there any performance gain or additional benefit on creating a primary key - unique ...
0
votes
0answers
125 views
When to run sp_refresh_parameter_encryption while using Always Encrypted?
I'm implementing Always Encrypted feature for an ASP.NET Application using SQL Server 2016. I have applied deterministic encryption on first five tables and created few stored procedures that ...
-1
votes
1answer
67 views
SQL Server Intellectual Property (Protecting DB Structure and Relations)
I would like to know is there any update about protecting DB Structure?
We deliver a licensed app that uses SQL as its main DBMS and we would like to lock the database structure (schema).
I know I ...
0
votes
1answer
48 views
How to configure/setup data at rest encryption in Couchbase 5.1 [closed]
I am evaluating best database solution for a sizeable application. My basic requirements include:
Data should be encrypted at disk level
Mobile support
Scalable
Enterprise support
I realized ...
2
votes
1answer
53 views
Difference between encrypted backup of an encrypted DB and an unencrypted backup of an encrypted DB
Let's say we have a fully encrypted database (the type of encryption is not considered in this scenario), and we produce two backups for that database.
If I encrypt only one of the backups, would ...
0
votes
1answer
188 views
SQL Server 2008 Database encryption
In my company there is MS SQL SERVER 2008 standard edition installed.
My problem is we want to encrypt whole database but in standard edition there is encryption like transparent-data-encryption(TDE) ...
2
votes
1answer
353 views
Issue Restoring Certificate to SQL Server When Different Service Account Used
I am attempting to configure backup encryption in SQL 2017 and have run into some problems.
I have no issues in creating the master key and certificate on one machine. Nor do I have a problem getting ...
1
vote
1answer
2k views
Always Encrypted: How to insert or update encrypted columns?
I have configured 'Always Encrypted' on one of the columns of a table of my SQL Server database. I am able to select and view data from client SSMS after passing the 'Column Encryption Setting = ...
0
votes
1answer
60 views
How to restore a database with SMK and Cerificate to another computer
On ComputerA, I have a database with SMK and a certificate. I've created this with the following code:
CREATE MASTER KEY ENCRYPTION BY PASSWORD = 'Password123';
GO
CREATE CERTIFICATE Certificate1
...
2
votes
1answer
177 views
How do I encrypt data to be decrypted on a linked server? SQL
I have been searching for 2 days for the solution to this, but every solution does not apply to my situation.
I have 2 SQL servers: DataServer and InterfaceServer set up as linked servers. DataServer ...
5
votes
1answer
97 views
Ola Hallengren: encrypt, but verify?
I've been using Ola Hallengren's scripts for a few years now, and a recent upgrade to MSSQL2017 has allowed me to start testing encrypted back-ups. Before anyone asks: yes, master keys and encryption ...
1
vote
1answer
363 views
Recreate symmetric key of unknown CREATE SYMMETRIC KEY
I found that for each encryption of a symmetric key an entry in sys.key_encryptions is present and at least for ENCRYPTION BY CERTIFICATE-type entries I can use the certificate of the specified ...
1
vote
2answers
286 views
Significantly Slower DB Dumps on AWS RDS After Turning on Encryption?
Turning on encryption on an AWS RDS MySQL instance results in significantly slower database dumps (using mysqldump).
mysqldump -u test -p -h xxx.aws.com > dump.sql
Is there a reason for ...
0
votes
0answers
62 views
Decrypt data (encrypted outside of SQL Server 2014) that used openssl
A client has a thorny problem.
Their client encrypted one column of a data file using openssl.
(Their client is a Linux based shop and they encrypted the column with openssl using AES 256 CBC.)
My ...
1
vote
1answer
129 views
Make encrypted differential backup to same media
I create encrypted backup as follow:
BACKUP DATABASE XXX
TO DISK = 'C:\Backup\XXX.bak'
WITH INIT, FORMAT,
ENCRYPTION (ALGORITHM = AES_256, SERVER CERTIFICATE = MyCertificate)
Then I try to ...
