Questions tagged [encryption]

The conversion of data into a form that cannot be easily understood by unauthorized users.

Filter by
Sorted by
Tagged with
0 votes
2 answers
92 views

How Does a Database that Supports TDE Work In Practice?

I'm very curious on how does TDE is implemented in practice. My goal is to get understanding on the usability constraint and possibility performance impact of applying such technique. Thus I'm trying ...
Mycotina's user avatar
  • 101
0 votes
1 answer
34 views

innodb_encrypt_tables = ON Convert table Collation

With Encryption at REST enabled on a MariaDB (10.4) database, can you change the Collation of all tables without unencrypting the database e.g: alter table <some_table> convert to character set ...
user2261750's user avatar
0 votes
0 answers
39 views

Cannot find the symmetric key 'e1', because it does not exist or you do not have permission. (SQL Server 2019)

It seems to be a weird error, I have tried everything from giving Control, Alter, and View Definition permission on the symmetric key but nothing seems to work out. Tried everything from this article. ...
Ashif Shaikh's user avatar
0 votes
0 answers
19 views

Changing Encyption on Sql Server 2016 Column from Triple Des to AES256

In the process of changing encryption from Triple Des to AES 256. Have been advised to have keys for both available for clients on server until migration is complete. First question is can I have a ...
northplatteriver's user avatar
0 votes
1 answer
66 views

SQL Server Database Encryption (Column Level)

This is not an issue, but more a Question on an unknown topic for me. A client of mine has asked to Encrypt some columns in the database, but from the application, he might see the values of the ...
Vasileios G's user avatar
1 vote
1 answer
142 views

SQL Server Encryption at rest for some rows of a database (SQL 2019 Std)

I'm looking for a solution to encrypt a portion of a database at rest. The database contains data from different companies that should be encrypted with separate keys. So far, I've considered that TDE ...
mCasamento's user avatar
-1 votes
1 answer
25 views

TDE setup with EMK in SQL SERVER 2019

We are implementing TDE in MS SQL SEREVR 2019 with EKM provider. We are using asymmetric key to encrypt the data at rest. Asymmetric key will be hosted in HSM appliances. I have one questions ...
sam patrick's user avatar
1 vote
0 answers
53 views

OPEN SYMMETRIC KEY from AKV takes too long randomly

This post is similar to another question listed here. Encrypting data by OPEN SYMMETRIC KEY by ASYMMETRIC KEY created with Azure provider in SQL server takes more than 2 min We are also facing the ...
Imtiyaz Thange's user avatar
1 vote
1 answer
45 views

Unknown, Un-encryted Connections [duplicate]

We have SSL enabled on our SQL servers and our monitoring tool is alerting that there are unencrypted connections. The check that monitors this runs every minute and uses the following query to check: ...
SE1986's user avatar
  • 1,908
3 votes
1 answer
155 views

Visibility of the Code for a view depends on from where I connect on SQL server

My SQL Server admin and I are currently struggling with a strange issue. When I connect to the database from the same machine I cannot access a view definition, there is a message: Property ...
Uwe Ziegenhagen's user avatar
3 votes
1 answer
210 views

Back up multiple databases to the same backup (BAK) file with encryption

I have a script that we run on an ad-hoc basis that grabs the names of 15 databases, then iterates through that list to backup each one into a single .BAK file. This is then downloaded for use ...
EvilDr's user avatar
  • 840
1 vote
0 answers
73 views

How to encrypt a production unencrypted RDS Aurora MySQL 8 cluster

I have a running RDS Aurora MySQL 8.0.23 cluster running in production. The database is unencrypted and I need to enable encryption for it. As far as I understand, this is not possible to do directly. ...
revy's user avatar
  • 111
3 votes
1 answer
3k views

TLS when connecting to SQL Server using "encrypt=false"

I'm trying to configure SQL Server 2017 Express Edition to use TLS 1.2 encryption, and accept connections from a simple test JDBC program. I'm reasonably experienced with java and MSSQL, but not so ...
Larry Menard's user avatar
0 votes
1 answer
167 views

How exactly are the password hashing functions in the pgcrypto module different from the regular MD5 and other algorithms?

This is not technically a database question, but about the innards of Postgres's pgcrypto extension.The documentation says The algorithms in crypt() differ from the usual MD5 or SHA1 hashing ...
ahron's user avatar
  • 779
0 votes
0 answers
997 views

Postgres AES encryption with pgcrypto encrypt for text of length >15 characters is not compatible with other platforms

I am in a need of joining 2 tables with stringed identifiers, the key in first table is encrypted with AES ECB and the one in the second table is a raw form of that field in first table. I am trying ...
Kush's user avatar
  • 101
1 vote
0 answers
86 views

TDE - Best Practices for Storing Master Database / TDE Database files and Backups

I have been doing some testing around TDE, in anticipation of enabling in my environments I have TDE enabled on a database which means I cannot restore or attach this database to another server ...
SE1986's user avatar
  • 1,908
0 votes
0 answers
96 views

Extract data from BKP file or verify if the backup is encrypted

A specific system, previously using a non encrypted Oracle 19 database, has been updated in such a way that now the database is encrypted (same Oracle version). I have successfully verified that the ...
Silverman's user avatar
  • 101
2 votes
1 answer
740 views

Have to regenerate SQL Server Master Key after every server reboot

We recently migrated our database over from SQL Server 2012 to a new SQL Server 2019 box. As soon as the database was migrated, I regenerated the master key, but whenever our SQL Server 2019 box ...
Timothy Ritter's user avatar
0 votes
0 answers
159 views

Encrypting data by OPEN SYMMETRIC KEY by ASYMMETRIC KEY created with Azure provider in SQL server takes more than 2 min

Have created a SYMMETRIC KEY for decryption by ASYMMETRIC KEY and the ASYMMETRIC KEY is created with Azure keyvault based key provider. Have used the details provided from Here and Here Have used the '...
ARV's user avatar
  • 103
0 votes
1 answer
62 views

How to encrypt database in SQL Server 2008 Express edition

There are times when I need to move a SQL Server 2008 Express database (I'm aware it is EOL) from one machine to another. In order to do that I need to implement a mechanism using C# to encrypt the ...
samthesorcerer's user avatar
0 votes
1 answer
1k views

Error creating ASYMMETRIC KEY - Cannot open session for cryptographic provider for SQL Server Cryptographic Provider for Azure Key Vault

I am creating an asymmetric key on the SQL Server database and have the SQL connector for Azure Key Vault installed and I am following the steps mentioned in the link setup steps for extensible key ...
ARV's user avatar
  • 103
1 vote
2 answers
323 views

Decrypt Symmetrically/Asymmetrically Encrypted Data in MS SQL (T-SQL) Server via Apex Crypto Class

Hope you're having a good day. This is in continuation to my previously posted question in Salesforce StackExchange. I was suggested to seek help at DBA SE in order to find a way to extract Symmetric ...
Assadullah Shaikh's user avatar
0 votes
1 answer
1k views

Is the encryption of the password vault of MySql workbench secure enough?

MySql workbench stores passwords in a file called user_data.dat which is encrypted by default. But how strong is this encryption and what algorithm is used exactly? There are tools available on the ...
Maurice's user avatar
  • 137
1 vote
1 answer
978 views

Understanding of database master key in SQL Server

Let's say I have a production server and I have a database master key ##MS_DatabaseMasterKey## (master_key1) on it. I created a certificate c1, which is encrypted by master_key1 by default. Then I ...
Fajela Tajkiya's user avatar
3 votes
1 answer
161 views

Why isn't database decryption working after failing over to the standby?

We added a new node (N2) to our SQL Server 2019 cluster. On existing N1, decryption queries works fine but when we failover to N2, decryption is failing. The database master key on N1 is encrypted by ...
Sam's user avatar
  • 31
0 votes
2 answers
1k views

Postgresql : decrypt column only once when used in WHERE clause

I have the following request, using pg_trm and gin index: SELECT email, first_name, last_name FROM external_patient WHERE PGP_SYM_DECRYPT(cat_name::bytea, '...
Pascal Ognibene's user avatar
0 votes
0 answers
111 views

When rebuilding sql server on a new machine, should SMK be restored prior to or after restoring system dbs?

Service Master key is at top of sql server encryption hierarchy. Linked server, credentials, database master key (if any) are encrypted using the service master key. When rebuilding a sql server using ...
variable's user avatar
  • 3,430
1 vote
1 answer
85 views

SSL Encryption for Kafka Pipelines

Any [SingleStore] users out there? For enabling SSL encryption (only) for Kafka pipelines, we created the pipeline like below: CREATE PIPELINE `kafka_ssl` AS LOAD DATA KAFKA '<kafka-host>:<...
Matt Brown's user avatar
-1 votes
1 answer
113 views

What is the concept of service master key in FCI?

In a single sql server instances, sensitive data like passwords in linked server and credentials are encrypted using the server master key. The key or objects can be decrypted only by the sql service ...
variable's user avatar
  • 3,430
0 votes
0 answers
1k views

An error occurred during service master key initialization (sql error log)

I have migrated sql server 2017 to new hardware. The sql error log shows following error log whenever the sql server service is restarted. An error occurred during service master key initialization I ...
variable's user avatar
  • 3,430
0 votes
1 answer
62 views

How to test whether current sql engine service account can decrypt the SMK?

Is it true that when the sql service account is changed via the config manager then the new account can decrypt the SMK. However if the change was made via the services.msc, then the new account doesn'...
variable's user avatar
  • 3,430
0 votes
1 answer
617 views

How to decrypt zipped data in MSSQL table

We're trying to import (reverse engineer) some data from someone else's MS SQL database, without any vendor support. In the past the data has been stored in either plain text or RTF so easy to extract....
Delphinus's user avatar
2 votes
1 answer
656 views

How do I generate the private key needed to restore the encrypted backup?

I'm simulating the situation where I take a backup from instance A and restore it on instance B. I followed the doc to Backup to Disk with Encryption. Since I'm using only my desktop to simulate the ...
Ronaldo's user avatar
  • 5,059
-2 votes
1 answer
223 views

Unknown database connections

an audit has highlighted some (apparently) unencrypted connections on one of our 2 nodes availability groups. The IP address (10.x.x.x) is the IP of the other node in the AG. Does anyone know what ...
AlexP's user avatar
  • 1
1 vote
3 answers
342 views

Is there a way to add database encryption on certain columns without changing code base?

I've experienced a few companies that have various different codebases ranging from 20 year old code without the source anymore to 1 to 10 year old code with the source but thousands of database calls....
SolidSnake4444's user avatar
4 votes
1 answer
774 views

Can't restore a backup of database which has TDE enabled

I'm trying to restore the backup of database which has Transparent Data Encryption enabled. I have verified the certificate thumbprint in the backup file is the same as TDE certificate in [master] ...
Mar71ns's user avatar
  • 76
1 vote
1 answer
627 views

Should a client connecting to a server via a unix-socket be encrypted?

Does a client connection need encryption if the only connection option is via unix socket? e.g. my.cnf [mysqld] socket = /run/mysqld/mysqld.sock I'm considering these options, but I'd prefer not to ...
Jeff's user avatar
  • 143
0 votes
1 answer
297 views

Detecting whether a varchar value is already encrypted by EncryptByPassPhrase() in SQL Server

Starting with a varchar(100) column named Password in a table Users with one record in it, after performing an update on the column to encrypt it with EncryptByPassPhrase() on the Password column the ...
Guessed's user avatar
  • 153
0 votes
0 answers
58 views

Azure SQL Column encryption and backups

I am starting a project and for this project I need to encrypt columns containing PII Data in an Azure SQL database. As a developer, I have often handled this step in my code, but moving forward I ...
Peter Lange's user avatar
0 votes
1 answer
1k views

Certificate (SHA1) loaded in a database but couldn't be found under SQL Configuration Manager and Key Registry

I have two instances on a server. sql 2014 (port 1433) and sql 2016 (port 50019) I have a certificate with SHA1 algorithm on a server that is not expired. **When sql server started I can clearly see ...
Serdia's user avatar
  • 657
4 votes
1 answer
2k views

Monitoring SQL Server Encryption With Extended Events

Is there a way to monitor for encrypted connections through Extended Events? I've monitored for TLS 1.0, 1.1 and 1.2 handshakes in the past using sqlsni.TRACE but cannot find something along the same ...
PseudoToad's user avatar
1 vote
1 answer
265 views

If I backup my Certificates, why do I need to backup the DMK?

If I have a server where I use TDE, configured as follows: USE [master] CREATE DATABASE MyTDE CREATE MASTER KEY ENCRYPTION BY PASSWORD = 'My57r0ngp455'; CREATE CERTIFICATE MyTDECert WITH SUBJECT = '...
SE1986's user avatar
  • 1,908
0 votes
1 answer
292 views

Secure MySQL database by encryption?

I have cloud webserver running ubuntu where a MySQL database is installed. The database has a table with sensitive data. To protect the data I would like to encrypt the database (or database content). ...
user avatar
-1 votes
1 answer
3k views

To do encryption for postgresql db backup

Is this possible when someone takes backup of my postgres db it should be in encrypted form(i.e.if root user will access from command line(pg_dump) or from any tool). and how we can decrypt that ...
Dinesh Patil's user avatar
2 votes
0 answers
64 views

Using ADONET SqlClient library how to access the plain-text value of an encrypted column in SQL Server?

In a SQL Server 2017 database running on my development PC, a column in a particular table is encrypted with a column encryption key. CREATE TABLE Test(         id int IDENTITY(1,1) NOT NULL PRIMARY ...
Tim's user avatar
  • 435
1 vote
2 answers
401 views

Best way to store encrypted API identifiers (MariaDB)

So for max security I have to encrypt some string keys which I need to call specific actions of an API, at a very regular basis of the use of an application, so performance should also be considered. ...
DevelJoe's user avatar
  • 163
0 votes
1 answer
226 views

Data Encryption in MariaDB

It's the first time I'm using encryption in MariaDB, so I need to assure that I'm getting it right. I need to simply store some identifiers in an encrypted way, and am wondering if I'm doing it ...
DevelJoe's user avatar
  • 163
4 votes
1 answer
1k views

Load assembly from a certificate in SQL Server

We received an assembly from external vendor as CREATE ASSEMBLY MYCALC_DLL AUTHORIZATION dbo FROM 0x42A728....<300,000 binary values> WITH PERMISSION_SET = UNSAFE GO And this DLL is been ...
Kris's user avatar
  • 412
0 votes
3 answers
293 views

SQL Server TDE - encryption_state 2 stuck at 100% complete

I have enabled TDE on two databases. One is around 700 GB and that completed over the night and has encryption_state=3 The other one is almost 2 TB. That one has encryption_state=2 and ...
CWiik's user avatar
  • 11
0 votes
1 answer
429 views

Supported RSA Key Lengths for Encrypted SQL Connections

I'm having trouble finding any documentations regarding supported key lengths for RSA certs to encrypt SQL connections. Our internal CA is issuing certs with a 4096 key length and that seems to work ...
Davin Studer's user avatar

1
2 3 4 5
8