Questions tagged [encryption]
The conversion of data into a form that cannot be easily understood by unauthorized users.
308
questions
-1
votes
1answer
27 views
Slowness issue troubleshoot on encrypted SP [closed]
I have a database with encrypted objects and facing slowness at application layer which execute reports. I am not able to trace the stored procedures because it is encrypted.
Please help me how to ...
-1
votes
1answer
22 views
what would be the best way to store password hashes with regards to k-anonymity?
do i need to do anything special or can i just store them in a single field table? i feel like i'm missing some security concerns if i just store the sha-1 hashes in a db with a single field table.
...
-1
votes
1answer
29 views
how to put encryption in place while creating db link between on premise db 12c and cloud db 11g
we need to create db link between our db on premise and our medical db on oracle cloud. Our main concern is the data encryption while data transfer happen. Need a solution.
1
vote
1answer
25 views
ola-hallengren backup solution with encryption is not encrypting
Installed OH's scripts and they run great. sqlserver 2017 standard edition in a testing/dev environment. testing before rolling out to production.
I did a test of a restoration of an encrypted, or so ...
0
votes
1answer
20 views
For SSL renewal procedure in Db2 LUW , DO i need to create CSR request for each instance residing in same server?
I am trying to renew my SSL certs . Stuck here if we need to have create a Certificate Signing Request for each instance residing on the same server and send it to CA who will provide us the ...
0
votes
0answers
26 views
Decrypting data in SQL Server from another source
I'm an Oracle DBA that is learning SQL Server. I have data that was replicated from Oracle to SQL Server 2017 that I need to be able to decrypt in a controlled manner by queries on SQL Server.
I ...
0
votes
0answers
16 views
What is the best way or alternative for indexing an encrypted column in MySQL?
So in Oracle, one can use function indexes. MySQL unfortunately, does not have function indexes (as far as I know). Can someone share how they were successfully able to optimize a query that ...
0
votes
0answers
16 views
How to decrypt aes-128-ecb data in postgresql? [duplicate]
I am looking for a way to decrypt aes that was encrypted earlier in mysql and then migrated to postgresql. In mysql I used standard aes_encrypt with block encryption mode aes-128-ecb, but I can't seem ...
3
votes
1answer
65 views
Always Encrypted: How do I do an equality join with a non-encrypted column to a deterministic encrypted column?
The official Microsoft documentation for Always Encrypted on SQL Server 2017 states:
Deterministic encryption always generates the same encrypted value for any given plain text value.
Using ...
0
votes
0answers
16 views
Can we apply database encryption in mongodb community edition?
I know there's features in mongodb Entreprise edition that allow encryption. I'm using mongodb community edition for personal project and i want to keep my database safe and encrypted.
Is there any ...
0
votes
1answer
37 views
How to deny viewing definition of server level trigger?
I have several server level triggers, that I want users to deny viewing definition of. I control server level permissions, users aren't sysadmins etc.
I've tried 2 options:
DENY VIEW ANY DEFINITION ...
1
vote
2answers
95 views
Converting MySQL AES_DECRYPT() to Postgres decrypt()
I have this MySQL query using AES_DECRYPT() that is the following:
SELECT *
FROM data_tbl
WHERE AES_DECRYPT(data_point,'aBcDeF')='data_1';
I've figured out as much that the equivalent in Postgres ...
0
votes
0answers
27 views
Hardening WITH ENCRYPTION option for stored procedure protection
Is there any way for make WITH ENCRYPTION option more difficult to bypass ?
I have to protect the stored procedures code and hide it from other sysadmin of the instance.
I can't manage it with ...
1
vote
1answer
78 views
SQL Server Encrypted Connections - Configuration Manager does not see Certificate
My goal is to implement encrypted connections on Test SQL Server instance
First, tried to create self-signed certificate in the Certificates snap in (certlm.msc), Personal > All Tasks > Request New ...
3
votes
0answers
42 views
Is it possible to log whenever someone decrypts a credit card in MSSQL 2012?
All of our credit cards are encrypted. The process to decrypt them is to Open the symmetric key and decrypt the data by certificate.
Is it possible to add a trigger on something in the process to ...
0
votes
2answers
45 views
Encoding issue mysql
I'm using the MD5 hash function of MySQL to hash some data I import into the database from a CSV file.
The issue is that some lines have an incorrect hash (but not all of them).
When I use a query:
...
1
vote
0answers
11 views
Elastic queries with encrypted columns in tables using symmetric keys
I have elastic queries running cross-subscription for everything except tables with encryption.
Now I need to tackle tables that are encrypted.
How (if at all possible) do I open the keys on the ...
1
vote
0answers
22 views
In Place Rebuild a TDE Encrypted SQL Server Instance
I have a TDE Encrypted SQL Server machine (with a masterkey, Certs, etc). I need to rebuild this SQL Server onto new hardware, BUT keep the original SQL Server Name. The new box will be named exactly ...
0
votes
1answer
69 views
How do we restore database configured with Always Encrypted between environments and enable web app to encrypt/decrypt data?
I have a SQL Server 2016 database configured with AE in Production environment. Column Master key Certificate is available(under Windows Certificate Store -> Local Machine location) in a different ...
0
votes
1answer
191 views
Using letsencrypt with postgresql [closed]
I'm trying to use letsencrypt to generate certs in order to encrypt communication between a remote client and my postgresql database server. I'm not sure how to get started on setting this up. What ...
2
votes
1answer
43 views
How can I successfully decrypt column data through the whole database safely?
We're moving to Azure SqlDb but as part of that, we're needing to migrate away from EncryptByPassPhrase as it's not supported.
As such, we tried the process on the weekend but we ran into the log ...
3
votes
0answers
38 views
Encrypted stored procedure is encrypting the plan cache query plan
I'm having a really bizarre issue when querying the plan cache that relates to stored procedure encryption. However, it's the stored procedure that is querying the plan cache that is encrypted, not ...
12
votes
1answer
1k views
How can I know what hashing algorithm SQL Server used to decrypt the encrypted data when using the function DECRYPTBYPASSPHRASE?
My question is related to the following experiment with two instances:
SQL Server 2017 Express instance (Microsoft SQL Server 2017 (RTM-CU16))
SQL Server 2014 Express instance (Microsoft SQL Server ...
2
votes
1answer
205 views
SQL Server Encryption with “localhost” certificate
Using SQL Server 2014/2016:
I'm trying to encrypt my connections from my application to my local SQL Server instance. As I read the documentation, SQL Server seems to very much prefer certificates ...
0
votes
0answers
30 views
Encryption procedure other than Always Encrypted
I would like to ask if there are other encryption method in MS SQL other than always encrypted?
7
votes
1answer
121 views
Why does SQL Server require a private key to encrypt a backup?
I am setting up an experiment where I only have the public key portion of a certificate on the server. The certificate was generated on another server and I did not restore the private key.
When I ...
1
vote
1answer
157 views
SQL Connector for Azure Key Vault - Cannot use more than one key vault
I am using SQL Server 2016 Enterprise Edition with SQL Connector for Azure Key Vault. I am trying to attach more than one Key Vault to my SQL instance but it is not working.
I went through these ...
0
votes
1answer
55 views
Force Client to Validate SSL Certificate?
When SQL Server uses the Force Encryption with value "yes" then if in the client-side we use encrypt=true option in the connection string, then the client application tries to verify the server ...
2
votes
1answer
86 views
Configuring SQL Server for SSL Encryption
I'm new to the DBA role and I've been tasked with configuring a SQL Server install for a client, with the requirement that databases will be distributed across two instances. Connections to one of ...
0
votes
0answers
39 views
How to speed up the database encryption / decryption process in Oracle 11 Standard Edition?
I have an 11-year old huge database designed in Oracle 11g Standard Edition. It requires to be encrypted for maximum security.
We have used dbms_crypto library to perform the encryption & ...
2
votes
1answer
71 views
Is SQL Server Certificate using asymmetric encryption internally?
In Books Online I've read that both asymmetric key and certificates use the idea of asymmetric encryption. For the asymmetric key it's clear, but do the certificates created in SQL Server or let's say ...
1
vote
1answer
54 views
What does a deterministic symmetric key mean?
In sqlservercentral blog I've encountered this phrase
Symmetric keys are deterministic
when created, meaning that the same parameters run in different
databases will result in the same key. ...
0
votes
1answer
238 views
Is individual column and row-level encryption possible in SQL Server?
I know about complete column level encryption techniques and complete database encryption. But is it possible to encrypt individual rows and columns in SQL Server?
Thanks
0
votes
1answer
104 views
Database backup and restore incase Always Encrypted feature is enabled
I would like to know that How SQL database backup and its restoration on other server will work if Always Encrypted feature is implemented on most of its tables?
Thanks
1
vote
1answer
26 views
Does AE certificate include both master and encryption keys together?
After setting up Always Encrypted, I can see a certificate in my Current User
when selecting
select * from sys.column_master_keys
under the key_path I see this location, but there is no location ...
1
vote
1answer
80 views
Master Key vs Password Certificate Encryption in SQL Server
We can encrypt certificates in SQL both by the database master key, and the other option is by password. I want to know the advantages and disadvantages of DMK encryption. Does password usage make the ...
2
votes
1answer
84 views
When is Service Master Key Exactly generated?
As it is created automatically, on Microsoft official source it says during setup.
but in the 70-764 official exam prep book page 18, also there is another non official blog which say
Any time ...
1
vote
1answer
108 views
SQL Server Security - Encryption [closed]
I have requirement to store the some sensitive information in SQL Server 2016. Organization policy demands, it should be encrypted.
Business Requirement:
Data cannot be decrypted by DBA.
Data cannot ...
0
votes
1answer
64 views
How can I decrypt data on a replicated MSSQL database?
I have a database which uses a symmetric key to encrypt a credit card field. There is a trigger on the credit_card field which runs every time it is updated, to encrypt the contents, and save it to ...
1
vote
1answer
71 views
Verifying Oracle 12 client server encryption [closed]
I'm getting conflicting information on whether encryption is active between my Oracle server and a Linux client:
SQL> select NETWORK_SERVICE_BANNER from v$session_connect_info where SID =
...
1
vote
1answer
255 views
Why does setting my column as Always Encrypted change its collation from SQL_Latin1_General_CP1_CI_AS to Latin1_General_BIN2?
I am encrypting a VARCHAR(50) NULL column as randomized. When doing this, the collation is changed from SQL_Latin1_General_CP1_CI_AS to Latin1_General_BIN2.
I cannot find any resources explaining why ...
3
votes
2answers
69 views
Can only specific SQL users be forced to use TLS?
My school would like to develop custom software for some embedded devices. As part of this, we may need the devices to connect to an SQL Server instance.
Is it possible to force specific SQL users to ...
0
votes
0answers
32 views
Azure Database Encryption (ERROR ON WEB APP)
Currently I have an azure subscription which has a server and database.
I already encrypt a column in a table. i am using "always encrypted" method. Now I want to generate a .pfx file after I ...
0
votes
0answers
211 views
Azure sql database backup and exporting data-tier application
Currently i have an azure subscription in it has a server and a database.
How could i setup azure SQL database backups that will run automatically for example every 15 mins? is there a way? if yes ...
2
votes
1answer
94 views
Troubleshooting a slow performing encrypted stored procedure
I have a stored procedure which is part of a vendor supplied system. The stored procedure is encrypted so we can't see the code.
The stored procedure has all of a sudden started to run slow.
The ...
0
votes
1answer
389 views
Best Approach for PII and Databases
PII, or Personally Identifiable Information, involves information that may include the following, among other data:
First Name
Last Name
Email Address
Phone (any of them)
Billing Address
Shipping ...
1
vote
0answers
216 views
How to find out everything that is affected by a master key?
Following up after a situation on an important LIVE server -
where I have the master key backed up,
but the decryption password for that master key backup file is missing.
I can't open the master ...
3
votes
0answers
370 views
How to encrypt a column using aes-256-gcm encryption in PostgreSQL?
As a database point person, I am required to encrypt SSN numbers wherever they are in a table. We use PostgreSQL.
My application counterparts require that we use the AES-256-GCM encryption algorithm. ...
0
votes
0answers
1k views
How to resolve an SQL Server “Target principal name is incorrect” error invoked after upgrading from SQL Server 2016 to 2017?
I am experiencing a "Target principal name is incorrect" error after upgrading SQL Server 2016 to 2017. The SQL Server 2016 instance has been uninstalled. The certificate which is registered in SQL ...
5
votes
2answers
185 views
Changing a certifcate+key algorithm by dropping & recreating with the same names
We have a situation where a symmetric key has been created (a long time ago) using TRIPLE_DES. This is used to encrypt a password column, and is used by around ten stored procedures (that utilizes ...
