SQL Server Data and Object Encryption
-
Does SQL Server 2000 provide encryption for the data? For the DB Objects? For Logins and Passwords? What is a good KB Article or White Paper to read on the different types of SQL Server 2000 Encryption Features?
Thanks in advance, Kevin
-
SQL Server does not have a good builtin encryption process. There are a number of third party extended procedures available. I am currently involved in a project to encrypt data in a SQL Server database and we settled on the NetLib Encryptionizer product ( http://www.netlib.com ).
Gordon Pollokoff
"Wile E. is my reality, Bugs Bunny is my goal" - Chuck Jones
-
You can encrypt stored procs and views - although it can be unencrypted with readily available scripts. Yukon has better encryption techniques - but who can wait that long
-
Passwords are encrypted for SQL Server logins (you can see this in sysxlogins). If you are doing application-based logins where you are storing username/passwords in a database table, no, SQL Server 2000 provides nothing for encryption.
As has been said by Gordon, 3rd party or a custom-built solution are your only options. Protegrity is another one which does encryption within the database.
SQL Server 2005 does have encryption currently in Beta 2, so if it stays you'll have access to such, but Steve's editorial talks about the delay just to Beta 3, so there's not a firm date on the RTM. If you're interested in what all is involved in the new encryption mechanisms, I wrote an article in the Jan/Feb issue of SQL Server Standard magazine and you can also find some information at Randy Dyess' site:
http://www.database-security.info
K. Brian Kelley
@kbriankelley
Viewing 4 posts - 1 through 3 (of 3 total)
You must be logged in to reply to this topic. Login to reply