Questions tagged [encryption]
The conversion of data into a form that cannot be easily understood by unauthorized users.
388
questions
1
vote
1
answer
653
views
Configure SQL Server to encrypt data traffic in both directions
How can I ensure that SQL Server data traffic is encrypted over the wire both from server to client and from client to server?
I have set Force Encryption to Yes and that alone seems to hide query ...
3
votes
0
answers
166
views
Securing a Cassandra Cluster
We've managed to set up a Cassandra 2.2.6 cluster of two physical nodes (nodetool sees both of them, so I'm quite certain the cluster is indeed active). My steps to create the cluster were (this ...
1
vote
2
answers
763
views
how to Protect certificate in sql server
I am using symmetric key encryption in SQL server but the problem is that if anyone has permissions to explore the database they can easily view certificates and symmetric keys and can therefore ...
1
vote
1
answer
5k
views
Any possible way to encrypt SQL Server 2012 database or backup?
We don't have SQL Server 2014 or later versions, so I can't take advantage of the backup encryption enhancement available in those. But I would like to know if there are any ways to use any type of ...
5
votes
1
answer
169
views
Is there any reason to back up these system-created certificates?
I understand the need for backing up keys and user defined certificates, but is there any reason that we should back up these certificates that are system-created?
MS_AgentSigningCertificate
...
2
votes
1
answer
630
views
Encrypt / Decrypt String
I've been approached with a requirement. One of our devs wants to be able to store information in the database, but once there it needs to be encrypted, so that if anyone ever gets a copy of the ...
11
votes
2
answers
40k
views
Restoring encrypted database on another server (using Backup Encryption)
I have two SQL Server instances on same machine. I want to create an encrypted backup on one of the databases and then restore it on the second instance. I am doing the following steps:
Create and ...
1
vote
1
answer
1k
views
Sharing keys and certificates between SQL Server 2014 server for encrypted backup and restoration
I have six SQL Server 2014 servers. I am not using TDE, Transparent Data Encryption, on any server.
I would like to be able to take an encrypted backup of a database on ANY server and restore that ...
1
vote
1
answer
2k
views
Crytography in PostgreSQL
I'm thinking to use PostgreSQL for a project because its free, people say its good, but I'll need some encryption in my db. I did a little search and I found these options in PostgreSQL:
bf
md5
xdes
...
3
votes
1
answer
1k
views
Why isn't the ASYMKEY_ID function returning the Asymmetric Key ID?
I have created database master key. Then I have created asymmetric key:
CREATE ASYMMETRIC KEY smGK_АSymmetricKey_01
WITH ALGORITHM = RSA_512
In the documentation is said, that:
PASSWORD = '...
2
votes
1
answer
496
views
SQL 2016 Always Encrypted, options appear in one environment, not the other
We have two different environments that are replicas of each other - DEV/STG and PROD. We recently upgraded both environments to SQL Server 2016 using the same upgrade process (we're on AWS, so it ...
2
votes
1
answer
3k
views
How to configure encrypted SQL Server connections to prevent MITM attacks?
It has come to my surprise that SQL Server by default does nothing to prevent man-in-the-middle attacks when configuring your SQL Server to enforce connection encryption.
Forcing encryption on your ...
2
votes
2
answers
5k
views
Where/How to generate the validation key and decryption key for SSRS View State Validation
According to this Technet article, I need to :
Generate a validation key and decryption key by using the autogenerate functionality provided by the .NET Framework.
The step does not explain how to ...
1
vote
1
answer
2k
views
Setup SQL Server SSL client certificate
I have created a certificate authority on my Linux server using OpenSSL. I have added that certificate authority to the Windows Trusted Root Certificate Authorities, which it now recognises.
What do ...
4
votes
1
answer
9k
views
Decrypting Previously Encrypted Data Returns NULL
I'm having trouble decrypting data that has previously been encrypted and stored in a table.
After opening my symmetric key and encrypting the data using EncyptByKey(), I get NULL values when ...
5
votes
3
answers
7k
views
Open source & cheap 'data at rest' encryption solutions
So I am exploring some options about database encryption. The best options are commercial (TDE). I am looking for an open-source implementation. Recent releases of MySQL and MariaDB have data-at-rest ...
0
votes
2
answers
104
views
Backup encryption questions
We're going to be implementing encrypted backups in SQL 2014 soon and I'd like to know the gotchas or lessons encountered by anyone else who has done the same. I've read up at MSDN and elsewhere, ...
3
votes
0
answers
68
views
How can I attach the SSL authenticated certificate for my SQL Server 2014 if it is not on domain controller
We have Microsoft Azure with Windows Server 2012 R2 in Cloud Computer and window Server is Standalone it is not come under domain controller. We want to add SSL authentication.
SQL Server is not ...
9
votes
1
answer
3k
views
TDE - Encryption on a large database
I'm in the process of researching TDE implementation on a VLDB and would like to know if anyone has real world experience with enabling encryption on a production server.
What kind of problems (if ...
9
votes
2
answers
18k
views
Error: "The certificate cannot be dropped because one or more entities are either signed or encrypted using it."
I have a certificate I would like to remove from the database.
If I issue the command
DROP CERTIFICATE <FooCert>
I get the error
The certificate cannot be dropped because one or more entities ...
1
vote
1
answer
70
views
When would one want to use Oracle transparent data encryption
Oracle TDE features comes with various limitations such as not being able to encrypt columns which are used in foreign key constraints. And probably is available only with enterprise edition which ...
2
votes
2
answers
2k
views
Encrypting a Database row-by-row
I have a large database (millions of rows in hundreds of tables) that contains sensitive data (Think SSNs, account numbers, etc). I am tasked with safeguarding the data and have chosen to encrypt only ...
1
vote
1
answer
53
views
Accessing Encrypted SQL Server database through a web-based application
I have secured a database within SQL Server Instance on my local machine using Netlib Encryptionizer. I can access the database by securing my SQL Server instance using the same password as encrypted ...
1
vote
2
answers
483
views
MySQL encryption for 'database at rest' on cloud services
We are migrating our system to a cloud environment (AWS), and have been given new client requirements for having our MySQL data-at-rest encrypted.
Currently it is unclear how far this should go. It ...
1
vote
2
answers
2k
views
Is it possible to encrypt a column and NOT have to change app code?
Is it possible to encrypt a column (with Symmetric Key and Triple DES encryption) and then set up a login for an application such that the query code in the app does not have to be changed to used the ...
1
vote
1
answer
2k
views
Enable TDE When Publishing DACPAC
In the database properties in Visual Studio there is a checkbox for encryption. I'm not sure if I check this if it will enforce encryption when doing a DACPAC deploy. What I would really like to do is ...
4
votes
1
answer
4k
views
when to open and close symmetric keys
I am adding column encryption to a few tables using symmetric key encryption. In each one of the procs, I write code to open and close a keys. It seems a bit verbose to open and close them in each ...
1
vote
2
answers
344
views
Encrypted column - limit key access
I'm new to SQL encryption and have a SQL Server 2012 database. The database itself needs to be accessible by DBAs but the data within one of the columns a table should only be viewable in plain text ...
3
votes
1
answer
1k
views
How do I generate the ENCRYPTED_VALUE for CREATE COLUMN ENCRYPTION KEY?
I can make a certificate in the windows certificate store for the master column key easily enough with:
$cert = New-SelfSignedCertificate `
-Subject "Always Encrypted Sample Cert" `
-...
0
votes
1
answer
1k
views
SQL Server doesn't send intermediate SSL certificates
I am connecting to SQL Server (2008 R2) over open Internet and properly encrypting the connection is essential. I have COMODO certificate with two intermediate certificates between root CA and server ...
0
votes
1
answer
3k
views
What is the best way to store SSH fingerprints and public keys?
I'm building a virtual Keyring in our DB to allow users to store PGP/GPG public keys with relation to email addresses so that they can optionally encrypt all communications our system sends them. I'm ...
2
votes
1
answer
10k
views
What encryption options are available in SQL server standard edition? [duplicate]
I'm trying to look into what kind of encryption I can do with SQL server standard edition from 2008 and later.
So far, I know that I can't use Transparent Data Encryption (TDE) as that's part of ...
0
votes
2
answers
2k
views
Why CONTROL permission on certificate to be able to use it?
As per https://technet.microsoft.com/en-us/library/ms190499.aspx, to open a symmetric key that is encrypted by a certificate, a user needs the CONTROL permission on the certificate.
I tested this and ...
3
votes
2
answers
4k
views
How to test encryption on Amazon RDS MySQL?
Our company is creating a MySQL RDS with encryption enabled. Now, as we are new to RDS, we have couple of questions related to RDS.
Once we create a MySQL RDS with encryption enabled, how will we ...
1
vote
2
answers
3k
views
How to view security permissions for encryption keys in SQL server
Is there a way to view the security permissions assigned for encryption keys in SQL Server? Furthermore, where are all these keys stored?
4
votes
3
answers
4k
views
How long is the output of EncryptByPassPhrase(), relative to the input?
I'm starting an encryption project, using EncryptByPassPhrase(), mostly on VARCHAR values. Naturally, the encrypted values are longer than the originals. Is there a formula I can use to calculate ...
6
votes
3
answers
10k
views
MySQL secure random string generator
I am looking to generate a cryptographically secure string for password reset in MySQL. I know I could do this at the application level in PHP; but that requires the OpenSSL extension which many of my ...
2
votes
1
answer
319
views
Opening Symmetric Keys
I am trying to open a symmetric key I created in a database, but it doesn't seem to be working. I am executing the query as dbo and it even says that it is completed successfully. However, the value ...
3
votes
1
answer
4k
views
Encryption/Decryption with stored procedure / view
I'm working on a project that uses Entity Framework for programmers to access the data. We've recently found need to add fields that were determined that need to be encrypted. This will be the first ...
17
votes
4
answers
47k
views
How can I check if connection to Sql Server is encrypted?
In SQL Server I can "Force Encryption" in protocols settings. If I leave that set to "No" any client can still require encryption.
Can I somehow see what connections to the ...
3
votes
1
answer
2k
views
How to use an RSA public key as the primary key to a table in postgres
I have a data set that needs to be looked up by RSA public keys. These keys are 392 text characters long.
What is the best way to make that a primary and/or unique key?
Should it be a BYTEA ...
4
votes
3
answers
2k
views
PGP for securing my database?
I have considered TDE and cell level encryption mechanism for securing my database, however these two cannot fully satisfy my requirements.
I've found that PGP may help me, but it is mainly used for ...
1
vote
1
answer
601
views
Can we use TDE as an anti-injection technique
TDE prevent unauthorized access to the data by restoring the files to another server, because it requires the original encryption certificate and master key.
If i applied a table level encryption ...
2
votes
1
answer
3k
views
SSL error during SQL Server install
During my SQL Server 2014 Enterprise installation efforts, I encountered an error near the end of the install that has prevented completion.
A connection was successfully established with the ...
6
votes
4
answers
5k
views
encryption at rest for mysql
A MySQL database needs to contain highly sensitive data that cannot be left unencrypted at rest. But yet the database needs to remain searchable by an app. What are the options for encryption at ...
2
votes
1
answer
453
views
Microsoft TDE Permissions For Changing Keys
I am setting up roles as a layer of protection inside of MSSQL. One of the roles will only have the ability to change database encryption keys for TDE on the database server. The server will be using ...
10
votes
2
answers
2k
views
TDE prep: key/certificate backup for restores
I am working in a dev environment to better understand TDE encryption. I have it working along with backups and restores on another server. Had a few questions, I know I need to backup the certificate ...
3
votes
0
answers
178
views
Deny BACKUP CERTIFICATE
In SQL Server, there are three database roles that have CONTROL certificate permissions. Those are db_owner, db_DDLadmin and db_securityadmin.
Also, the documentation for decryptbycert specifies ...
2
votes
1
answer
201
views
Check if encrpytion key is valid in DB2
I have a DB2 table where one of the columns is encrypted using the two parameter variant of ENCRYPT (so the password is supplied in the SQL itself). Unfortunately due to an ETL issue the column got ...
1
vote
3
answers
5k
views
Cannot Decrypt the encrypted columns from the database backup on local machine
I've a SQL server 2014 running on one of our server. We're in the process of implementing security steps for our databases. I've encrypted a column in one of the table in the database on the server. ...