Questions tagged [encryption]

The conversion of data into a form that cannot be easily understood by unauthorized users.

Filter by
Sorted by
Tagged with
1 vote
1 answer
653 views

Configure SQL Server to encrypt data traffic in both directions

How can I ensure that SQL Server data traffic is encrypted over the wire both from server to client and from client to server? I have set Force Encryption to Yes and that alone seems to hide query ...
Guru Josh's user avatar
  • 253
3 votes
0 answers
166 views

Securing a Cassandra Cluster

We've managed to set up a Cassandra 2.2.6 cluster of two physical nodes (nodetool sees both of them, so I'm quite certain the cluster is indeed active). My steps to create the cluster were (this ...
Ray's user avatar
  • 131
1 vote
2 answers
763 views

how to Protect certificate in sql server

I am using symmetric key encryption in SQL server but the problem is that if anyone has permissions to explore the database they can easily view certificates and symmetric keys and can therefore ...
muhammad aamir akhter's user avatar
1 vote
1 answer
5k views

Any possible way to encrypt SQL Server 2012 database or backup?

We don't have SQL Server 2014 or later versions, so I can't take advantage of the backup encryption enhancement available in those. But I would like to know if there are any ways to use any type of ...
Pol's user avatar
  • 392
5 votes
1 answer
169 views

Is there any reason to back up these system-created certificates?

I understand the need for backing up keys and user defined certificates, but is there any reason that we should back up these certificates that are system-created? MS_AgentSigningCertificate ...
Clint's user avatar
  • 71
2 votes
1 answer
630 views

Encrypt / Decrypt String

I've been approached with a requirement. One of our devs wants to be able to store information in the database, but once there it needs to be encrypted, so that if anyone ever gets a copy of the ...
Molenpad's user avatar
  • 1,784
11 votes
2 answers
40k views

Restoring encrypted database on another server (using Backup Encryption)

I have two SQL Server instances on same machine. I want to create an encrypted backup on one of the databases and then restore it on the second instance. I am doing the following steps: Create and ...
gotqn's user avatar
  • 4,016
1 vote
1 answer
1k views

Sharing keys and certificates between SQL Server 2014 server for encrypted backup and restoration

I have six SQL Server 2014 servers. I am not using TDE, Transparent Data Encryption, on any server. I would like to be able to take an encrypted backup of a database on ANY server and restore that ...
John Lofgren's user avatar
1 vote
1 answer
2k views

Crytography in PostgreSQL

I'm thinking to use PostgreSQL for a project because its free, people say its good, but I'll need some encryption in my db. I did a little search and I found these options in PostgreSQL: bf md5 xdes ...
lipesmile's user avatar
  • 111
3 votes
1 answer
1k views

Why isn't the ASYMKEY_ID function returning the Asymmetric Key ID?

I have created database master key. Then I have created asymmetric key: CREATE ASYMMETRIC KEY smGK_АSymmetricKey_01 WITH ALGORITHM = RSA_512 In the documentation is said, that: PASSWORD = '...
gotqn's user avatar
  • 4,016
2 votes
1 answer
496 views

SQL 2016 Always Encrypted, options appear in one environment, not the other

We have two different environments that are replicas of each other - DEV/STG and PROD. We recently upgraded both environments to SQL Server 2016 using the same upgrade process (we're on AWS, so it ...
Josh Waclawski's user avatar
2 votes
1 answer
3k views

How to configure encrypted SQL Server connections to prevent MITM attacks?

It has come to my surprise that SQL Server by default does nothing to prevent man-in-the-middle attacks when configuring your SQL Server to enforce connection encryption. Forcing encryption on your ...
Sam Rueby's user avatar
  • 213
2 votes
2 answers
5k views

Where/How to generate the validation key and decryption key for SSRS View State Validation

According to this Technet article, I need to : Generate a validation key and decryption key by using the autogenerate functionality provided by the .NET Framework. The step does not explain how to ...
Geoff Dawdy's user avatar
  • 1,123
1 vote
1 answer
2k views

Setup SQL Server SSL client certificate

I have created a certificate authority on my Linux server using OpenSSL. I have added that certificate authority to the Windows Trusted Root Certificate Authorities, which it now recognises. What do ...
Mayazcherquoi's user avatar
4 votes
1 answer
9k views

Decrypting Previously Encrypted Data Returns NULL

I'm having trouble decrypting data that has previously been encrypted and stored in a table. After opening my symmetric key and encrypting the data using EncyptByKey(), I get NULL values when ...
user3504079's user avatar
5 votes
3 answers
7k views

Open source & cheap 'data at rest' encryption solutions

So I am exploring some options about database encryption. The best options are commercial (TDE). I am looking for an open-source implementation. Recent releases of MySQL and MariaDB have data-at-rest ...
paradoxical81's user avatar
0 votes
2 answers
104 views

Backup encryption questions

We're going to be implementing encrypted backups in SQL 2014 soon and I'd like to know the gotchas or lessons encountered by anyone else who has done the same. I've read up at MSDN and elsewhere, ...
machine2473's user avatar
3 votes
0 answers
68 views

How can I attach the SSL authenticated certificate for my SQL Server 2014 if it is not on domain controller

We have Microsoft Azure with Windows Server 2012 R2 in Cloud Computer and window Server is Standalone it is not come under domain controller. We want to add SSL authentication. SQL Server is not ...
mukesh singh 's user avatar
9 votes
1 answer
3k views

TDE - Encryption on a large database

I'm in the process of researching TDE implementation on a VLDB and would like to know if anyone has real world experience with enabling encryption on a production server. What kind of problems (if ...
Brickpack's user avatar
  • 119
9 votes
2 answers
18k views

Error: "The certificate cannot be dropped because one or more entities are either signed or encrypted using it."

I have a certificate I would like to remove from the database. If I issue the command DROP CERTIFICATE <FooCert> I get the error The certificate cannot be dropped because one or more entities ...
Geoff Dawdy's user avatar
  • 1,123
1 vote
1 answer
70 views

When would one want to use Oracle transparent data encryption

Oracle TDE features comes with various limitations such as not being able to encrypt columns which are used in foreign key constraints. And probably is available only with enterprise edition which ...
Kshitiz Sharma's user avatar
2 votes
2 answers
2k views

Encrypting a Database row-by-row

I have a large database (millions of rows in hundreds of tables) that contains sensitive data (Think SSNs, account numbers, etc). I am tasked with safeguarding the data and have chosen to encrypt only ...
Maximillian's user avatar
1 vote
1 answer
53 views

Accessing Encrypted SQL Server database through a web-based application

I have secured a database within SQL Server Instance on my local machine using Netlib Encryptionizer. I can access the database by securing my SQL Server instance using the same password as encrypted ...
Danish.O's user avatar
1 vote
2 answers
483 views

MySQL encryption for 'database at rest' on cloud services

We are migrating our system to a cloud environment (AWS), and have been given new client requirements for having our MySQL data-at-rest encrypted. Currently it is unclear how far this should go. It ...
bolty187's user avatar
  • 111
1 vote
2 answers
2k views

Is it possible to encrypt a column and NOT have to change app code?

Is it possible to encrypt a column (with Symmetric Key and Triple DES encryption) and then set up a login for an application such that the query code in the app does not have to be changed to used the ...
Park_Ranger's user avatar
1 vote
1 answer
2k views

Enable TDE When Publishing DACPAC

In the database properties in Visual Studio there is a checkbox for encryption. I'm not sure if I check this if it will enforce encryption when doing a DACPAC deploy. What I would really like to do is ...
Chris's user avatar
  • 113
4 votes
1 answer
4k views

when to open and close symmetric keys

I am adding column encryption to a few tables using symmetric key encryption. In each one of the procs, I write code to open and close a keys. It seems a bit verbose to open and close them in each ...
monkeyhouse's user avatar
1 vote
2 answers
344 views

Encrypted column - limit key access

I'm new to SQL encryption and have a SQL Server 2012 database. The database itself needs to be accessible by DBAs but the data within one of the columns a table should only be viewable in plain text ...
TryNCode's user avatar
  • 217
3 votes
1 answer
1k views

How do I generate the ENCRYPTED_VALUE for CREATE COLUMN ENCRYPTION KEY?

I can make a certificate in the windows certificate store for the master column key easily enough with: $cert = New-SelfSignedCertificate ` -Subject "Always Encrypted Sample Cert" ` -...
Justin Dearing's user avatar
0 votes
1 answer
1k views

SQL Server doesn't send intermediate SSL certificates

I am connecting to SQL Server (2008 R2) over open Internet and properly encrypting the connection is essential. I have COMODO certificate with two intermediate certificates between root CA and server ...
Robert Važan's user avatar
0 votes
1 answer
3k views

What is the best way to store SSH fingerprints and public keys?

I'm building a virtual Keyring in our DB to allow users to store PGP/GPG public keys with relation to email addresses so that they can optionally encrypt all communications our system sends them. I'm ...
oucil's user avatar
  • 506
2 votes
1 answer
10k views

What encryption options are available in SQL server standard edition? [duplicate]

I'm trying to look into what kind of encryption I can do with SQL server standard edition from 2008 and later. So far, I know that I can't use Transparent Data Encryption (TDE) as that's part of ...
Thorx99's user avatar
  • 23
0 votes
2 answers
2k views

Why CONTROL permission on certificate to be able to use it?

As per https://technet.microsoft.com/en-us/library/ms190499.aspx, to open a symmetric key that is encrypted by a certificate, a user needs the CONTROL permission on the certificate. I tested this and ...
bvgheluwe's user avatar
  • 101
3 votes
2 answers
4k views

How to test encryption on Amazon RDS MySQL?

Our company is creating a MySQL RDS with encryption enabled. Now, as we are new to RDS, we have couple of questions related to RDS. Once we create a MySQL RDS with encryption enabled, how will we ...
real gadha's user avatar
1 vote
2 answers
3k views

How to view security permissions for encryption keys in SQL server

Is there a way to view the security permissions assigned for encryption keys in SQL Server? Furthermore, where are all these keys stored?
Chelsea's user avatar
  • 11
4 votes
3 answers
4k views

How long is the output of EncryptByPassPhrase(), relative to the input?

I'm starting an encryption project, using EncryptByPassPhrase(), mostly on VARCHAR values. Naturally, the encrypted values are longer than the originals. Is there a formula I can use to calculate ...
Jon of All Trades's user avatar
6 votes
3 answers
10k views

MySQL secure random string generator

I am looking to generate a cryptographically secure string for password reset in MySQL. I know I could do this at the application level in PHP; but that requires the OpenSSL extension which many of my ...
Chris Muench's user avatar
2 votes
1 answer
319 views

Opening Symmetric Keys

I am trying to open a symmetric key I created in a database, but it doesn't seem to be working. I am executing the query as dbo and it even says that it is completed successfully. However, the value ...
Paco's user avatar
  • 21
3 votes
1 answer
4k views

Encryption/Decryption with stored procedure / view

I'm working on a project that uses Entity Framework for programmers to access the data. We've recently found need to add fields that were determined that need to be encrypted. This will be the first ...
ribald's user avatar
  • 33
17 votes
4 answers
47k views

How can I check if connection to Sql Server is encrypted?

In SQL Server I can "Force Encryption" in protocols settings. If I leave that set to "No" any client can still require encryption. Can I somehow see what connections to the ...
Mathias Rönnlund's user avatar
3 votes
1 answer
2k views

How to use an RSA public key as the primary key to a table in postgres

I have a data set that needs to be looked up by RSA public keys. These keys are 392 text characters long. What is the best way to make that a primary and/or unique key? Should it be a BYTEA ...
Kyle's user avatar
  • 31
4 votes
3 answers
2k views

PGP for securing my database?

I have considered TDE and cell level encryption mechanism for securing my database, however these two cannot fully satisfy my requirements. I've found that PGP may help me, but it is mainly used for ...
sujith karivelil's user avatar
1 vote
1 answer
601 views

Can we use TDE as an anti-injection technique

TDE prevent unauthorized access to the data by restoring the files to another server, because it requires the original encryption certificate and master key. If i applied a table level encryption ...
sujith karivelil's user avatar
2 votes
1 answer
3k views

SSL error during SQL Server install

During my SQL Server 2014 Enterprise installation efforts, I encountered an error near the end of the install that has prevented completion. A connection was successfully established with the ...
Steve DBA's user avatar
6 votes
4 answers
5k views

encryption at rest for mysql

A MySQL database needs to contain highly sensitive data that cannot be left unencrypted at rest. But yet the database needs to remain searchable by an app. What are the options for encryption at ...
CodeMed's user avatar
  • 487
2 votes
1 answer
453 views

Microsoft TDE Permissions For Changing Keys

I am setting up roles as a layer of protection inside of MSSQL. One of the roles will only have the ability to change database encryption keys for TDE on the database server. The server will be using ...
Leland B's user avatar
  • 121
10 votes
2 answers
2k views

TDE prep: key/certificate backup for restores

I am working in a dev environment to better understand TDE encryption. I have it working along with backups and restores on another server. Had a few questions, I know I need to backup the certificate ...
Thorin's user avatar
  • 320
3 votes
0 answers
178 views

Deny BACKUP CERTIFICATE

In SQL Server, there are three database roles that have CONTROL certificate permissions. Those are db_owner, db_DDLadmin and db_securityadmin. Also, the documentation for decryptbycert specifies ...
Michael Keleher's user avatar
2 votes
1 answer
201 views

Check if encrpytion key is valid in DB2

I have a DB2 table where one of the columns is encrypted using the two parameter variant of ENCRYPT (so the password is supplied in the SQL itself). Unfortunately due to an ETL issue the column got ...
SztupY's user avatar
  • 121
1 vote
3 answers
5k views

Cannot Decrypt the encrypted columns from the database backup on local machine

I've a SQL server 2014 running on one of our server. We're in the process of implementing security steps for our databases. I've encrypted a column in one of the table in the database on the server. ...
user3055603's user avatar

1
4 5
6
7 8