Questions tagged [encryption]
The conversion of data into a form that cannot be easily understood by unauthorized users.
328
questions
0
votes
0answers
16 views
Encryption & lsblk error
Previously I was performing encryption as below:
/sbin/cryptsetup --verbose -d - luksFormat /dev/md0
/sbin/cryptsetup --verbose -d - luksOpen /dev/md0 mysqldata
Now I am skipping the complete ...
0
votes
0answers
5 views
Load from column encrypted ASE database
ASE documents the process to export-import keys when we fully encrypt the database. Once imported, a create query with the same credential on a target allows load from the source database.
But in the ...
1
vote
1answer
29 views
SQL Server 2019 setting Force Encryption with a script
I have to update 50+ servers to use encrypted connection strings. Is there a way to script setting Force Encryption and TrustServerCertificate (e.g Powershell, or ???) so that I don't have to open ...
0
votes
0answers
40 views
Decrypt the DSN section of RsReportServer.config file
The DSN section of the RsReportServer.config file contains the encrypted connection string to the PowerBI Report server databases. I noticed that the DSN string changes everytime I make any changes ...
0
votes
2answers
21 views
Encrypt application name in c# and decrypt in SQL Server
I've encrypted application name in my c# app using MD5, so when constructing the connection string the application name is passed to SQL as encrypted. I would like to decrypt in SQL server the value ...
1
vote
1answer
35 views
Incremental encrypted per database backup and Partial restore policy for MySQL 5.7 in replication setup
I will run a replication cluster using MySQL 5.7 and I would like to set up for each database a backup policy that has a full once per day + incremental every N hours with data encrypted (based on the ...
1
vote
2answers
42 views
SQL Server CLE Encryption Implementation
We got instruction from HQ to implement encryption on our database. The reason be, should a client gets hacked, the hackers cannot access personal info such as names, phone numbers, addresses, etc.
I ...
0
votes
1answer
33 views
MySQL Security - Is there an easy way to encrypt a confidential data and also that it cannot view or access by DBA?
Is there an easy way on how can I encrypt a data and store it MySQL database and also it also cannot be viewed by dba?
0
votes
0answers
48 views
Always Encrypted on SQL Server LINUX
We can achieve Always Encrypted on Windows Server Machine using SSMS on my Application Server and if Database Server too want to view the encrypted column, we can always transfer the certificate from ...
-1
votes
1answer
42 views
Setting up encryption on a SQL2012 Database - how to?
I am not really a DBA, but I have a requirement to set up NIST-approved Encryption on some databases.
Looking around online, there appears to be a few varieties of Encryption for SQL, but the terms ...
0
votes
0answers
45 views
What does MariaDB use for an encryption initialisation vector?
I have been using MySQL 5.6 in development environment and MariaDB 5.6 in production until I needed to use encryption. MySQL 5.6 has multiple encryption modes and allows AES-256-CBC. MariaDB 5.6 only ...
1
vote
1answer
191 views
How to configure TCPS in JDBC thin client for oracle
An Java Application running with JDBC thin wtih TCP connection, Now require is to convert in TCPS for encryption transmission from application to database.
String url = "jdbc:oracle:thin:@(...
0
votes
1answer
61 views
Encryption Test
I'm using PostgreSQL-11 and I've been given a text string to decrypt as a test. I've got the details of how it was encrypted and its very simple. When I try to decrypt using select pgp_sym_decrypt(...
1
vote
0answers
29 views
JSONB encryption of specific elements
I have a JSONB object containing lots of elements and nested objects, and some of the elements are to be encrypted, e.g.:
jsonb_obj = '{"obj1" : {"obj2": {"firstname":&...
0
votes
0answers
132 views
Postgres SQL CPU and RAM optimisation to improve decryption performance with pg_crypto
I am currently working on an application that requires column-based decryption for a few thousand of rows on a regular basis. The queries are decrypted using pgp_sym_decrypt, where several columns are ...
0
votes
0answers
42 views
JSONB encryption
To search on my JSONB object I use the following query:
SELECT JSONB->obj
FROM table
WHERE JSONB->obj @> '{"element":"param"}'
Now the requirement is to encrpyt so I've ...
0
votes
1answer
33 views
Can I hide my password for data at rest encryption key?
For MariaDB encryption at-rest, my setting is
[mysqld]
# at-rest encryption
plugin_load_add = file_key_management
file_key_management_filename = /etc/mysql/rest/keyfile.enc
...
0
votes
1answer
46 views
What is the point of encryption at rest?
I am wondering what is the point of encryption at rest?
It is said that a hacker cannot steal the database and look through it. I'm afraid that it does not protect the database while the key is stored ...
0
votes
0answers
115 views
Why does Back Up Database Task fail to connect when Force Protocol Encryption is enabled on MS SQL Server 2019?
I have MS SQL Server 2019 where encrypted connections have been enabled. A certificate has been issued and installed on the server. In addition, I have also enabled Force Protocol Encryption in SQL ...
2
votes
0answers
50 views
Schema level encryption in Postgres
A multi-tenancy approach for many webapps is to use a separate PostgreSQL schema for each tenant.
In addition to permissions and access controls, is it possible to encrypt a tenant's whole schema ...
0
votes
1answer
13 views
Encrypt backup in 2008 R2
Is it possible to encrypt 2008 R2 backups like TDE for instance?
What I've read is encrypting the whole database and that way the backups will be encrypted. But can you have TDE encrypted backups ...
-1
votes
1answer
46 views
Where does data sit and where must it be encrypted
what is does it mean when data-at-rest is not encrypted at the datacenter. Does this mean that the data sitting in the database is not encrypted?
I am just trying to understand if data sits on the ...
0
votes
0answers
17 views
Can InnoDB data at rest encryption be overriden
I am exploring options for distributing a MySQL/MariaDB database with my app. I want to ensure users (even the root user) cannot view or manipulate data in my database/tables. Recent releases of ...
0
votes
1answer
32 views
Is there a way of securing ProxySQL's own SQLite3 database?
As I understand ProxySQL has support for SSL encryption for inbound and outbound traffic (front/backend) and supports password hashing. However back in 2017, one had direct database access:
How to ...
-1
votes
1answer
35 views
how to put encryption in place while creating db link between on premise db 12c and cloud db 11g
we need to create db link between our db on premise and our medical db on oracle cloud. Our main concern is the data encryption while data transfer happen. Need a solution.
2
votes
1answer
79 views
ola-hallengren backup solution with encryption is not encrypting
Installed OH's scripts and they run great. sqlserver 2017 standard edition in a testing/dev environment. testing before rolling out to production.
I did a test of a restoration of an encrypted, or so ...
0
votes
1answer
105 views
For SSL renewal procedure in Db2 LUW , DO i need to create CSR request for each instance residing in same server?
I am trying to renew my SSL certs . Stuck here if we need to have create a Certificate Signing Request for each instance residing on the same server and send it to CA who will provide us the ...
0
votes
0answers
112 views
Decrypting data in SQL Server from another source
I'm an Oracle DBA that is learning SQL Server. I have data that was replicated from Oracle to SQL Server 2017 that I need to be able to decrypt in a controlled manner by queries on SQL Server.
I ...
0
votes
0answers
80 views
What is the best way or alternative for indexing an encrypted column in MySQL?
So in Oracle, one can use function indexes. MySQL unfortunately, does not have function indexes (as far as I know). Can someone share how they were successfully able to optimize a query that ...
0
votes
0answers
75 views
How to decrypt aes-128-ecb data in postgresql? [duplicate]
I am looking for a way to decrypt aes that was encrypted earlier in mysql and then migrated to postgresql. In mysql I used standard aes_encrypt with block encryption mode aes-128-ecb, but I can't seem ...
3
votes
1answer
452 views
Always Encrypted: How do I do an equality join with a non-encrypted column to a deterministic encrypted column?
The official Microsoft documentation for Always Encrypted on SQL Server 2017 states:
Deterministic encryption always generates the same encrypted value for any given plain text value.
Using ...
0
votes
0answers
24 views
Can we apply database encryption in mongodb community edition?
I know there's features in mongodb Entreprise edition that allow encryption. I'm using mongodb community edition for personal project and i want to keep my database safe and encrypted.
Is there any ...
0
votes
1answer
62 views
How to deny viewing definition of server level trigger?
I have several server level triggers, that I want users to deny viewing definition of. I control server level permissions, users aren't sysadmins etc.
I've tried 2 options:
DENY VIEW ANY DEFINITION ...
1
vote
2answers
621 views
Converting MySQL AES_DECRYPT() to Postgres decrypt()
I have this MySQL query using AES_DECRYPT() that is the following:
SELECT *
FROM data_tbl
WHERE AES_DECRYPT(data_point,'aBcDeF')='data_1';
I've figured out as much that the equivalent in Postgres ...
0
votes
0answers
28 views
Hardening WITH ENCRYPTION option for stored procedure protection
Is there any way for make WITH ENCRYPTION option more difficult to bypass ?
I have to protect the stored procedures code and hide it from other sysadmin of the instance.
I can't manage it with ...
1
vote
1answer
307 views
SQL Server Encrypted Connections - Configuration Manager does not see Certificate
My goal is to implement encrypted connections on Test SQL Server instance
First, tried to create self-signed certificate in the Certificates snap in (certlm.msc), Personal > All Tasks > Request New ...
3
votes
0answers
42 views
Is it possible to log whenever someone decrypts a credit card in MSSQL 2012?
All of our credit cards are encrypted. The process to decrypt them is to Open the symmetric key and decrypt the data by certificate.
Is it possible to add a trigger on something in the process to ...
0
votes
2answers
101 views
Encoding issue mysql
I'm using the MD5 hash function of MySQL to hash some data I import into the database from a CSV file.
The issue is that some lines have an incorrect hash (but not all of them).
When I use a query:
...
1
vote
0answers
11 views
Elastic queries with encrypted columns in tables using symmetric keys
I have elastic queries running cross-subscription for everything except tables with encryption.
Now I need to tackle tables that are encrypted.
How (if at all possible) do I open the keys on the ...
1
vote
0answers
25 views
In Place Rebuild a TDE Encrypted SQL Server Instance
I have a TDE Encrypted SQL Server machine (with a masterkey, Certs, etc). I need to rebuild this SQL Server onto new hardware, BUT keep the original SQL Server Name. The new box will be named exactly ...
0
votes
1answer
232 views
How do we restore database configured with Always Encrypted between environments and enable web app to encrypt/decrypt data?
I have a SQL Server 2016 database configured with AE in Production environment. Column Master key Certificate is available(under Windows Certificate Store -> Local Machine location) in a different ...
0
votes
1answer
644 views
Using letsencrypt with postgresql [closed]
I'm trying to use letsencrypt to generate certs in order to encrypt communication between a remote client and my postgresql database server. I'm not sure how to get started on setting this up. What ...
3
votes
2answers
142 views
How can I successfully decrypt column data through the whole database safely?
We're moving to Azure SqlDb but as part of that, we're needing to migrate away from EncryptByPassPhrase as it's not supported.
As such, we tried the process on the weekend but we ran into the log ...
4
votes
0answers
84 views
Encrypted stored procedure is encrypting the plan cache query plan
I'm having a really bizarre issue when querying the plan cache that relates to stored procedure encryption. However, it's the stored procedure that is querying the plan cache that is encrypted, not ...
12
votes
1answer
2k views
How can I know what hashing algorithm SQL Server used to decrypt the encrypted data when using the function DECRYPTBYPASSPHRASE?
My question is related to the following experiment with two instances:
SQL Server 2017 Express instance (Microsoft SQL Server 2017 (RTM-CU16))
SQL Server 2014 Express instance (Microsoft SQL Server ...
2
votes
1answer
357 views
SQL Server Encryption with “localhost” certificate
Using SQL Server 2014/2016:
I'm trying to encrypt my connections from my application to my local SQL Server instance. As I read the documentation, SQL Server seems to very much prefer certificates ...
8
votes
1answer
197 views
Why does SQL Server require a private key to encrypt a backup?
I am setting up an experiment where I only have the public key portion of a certificate on the server. The certificate was generated on another server and I did not restore the private key.
When I ...
1
vote
1answer
428 views
SQL Connector for Azure Key Vault - Cannot use more than one key vault
I am using SQL Server 2016 Enterprise Edition with SQL Connector for Azure Key Vault. I am trying to attach more than one Key Vault to my SQL instance but it is not working.
I went through these ...
0
votes
1answer
69 views
Force Client to Validate SSL Certificate?
When SQL Server uses the Force Encryption with value "yes" then if in the client-side we use encrypt=true option in the connection string, then the client application tries to verify the server ...
2
votes
1answer
160 views
Configuring SQL Server for SSL Encryption
I'm new to the DBA role and I've been tasked with configuring a SQL Server install for a client, with the requirement that databases will be distributed across two instances. Connections to one of ...
