Click here to monitor SSC
SQLServerCentral is supported by Red Gate Software Ltd.
 
Log in  ::  Register  ::  Not logged in
 
 
 
        
Home       Members    Calendar    Who's On


Add to briefcase

"Column encryption" software recommendations? Expand / Collapse
Author
Message
Posted Friday, March 11, 2005 10:48 AM
SSC Eights!

SSC Eights!SSC Eights!SSC Eights!SSC Eights!SSC Eights!SSC Eights!SSC Eights!SSC Eights!

Group: General Forum Members
Last Login: Tuesday, August 5, 2014 1:35 PM
Points: 865, Visits: 872

I am testing software to encrypt columns in sql tables. It's an interesting experience. Typically such software renames the base table containing encrypted columns and creates a VIEW having  the name of the original table.  The idea is to make the transformation have as little impact as possible at the source code level. I applied one company's package to a test databases (pretyy complex ones) and found out... after much trouble .... that I couldn't de-crypt the very columns I had encryped! Yes, I can encrypt\decrypt Northwind with their product, I am working with the company on this one.

I also found that DTS no longer recognized the table name and that QA, expecting to display text, would sometimes freak out when it hit an encrypted (binary) field.

That's my sob story. Now I'm chechking out the products of Protegrity hoping to have greatr success.

Can you recommed database encryption software for me to test?

TIA,

Bill

 




Post #167284
Posted Monday, March 14, 2005 8:00 AM
SSChampion

SSChampionSSChampionSSChampionSSChampionSSChampionSSChampionSSChampionSSChampionSSChampionSSChampion

Group: General Forum Members
Last Login: Friday, May 18, 2007 3:36 PM
Points: 10,039, Visits: 1
No one has responded to this topic yet. Even if you don't have a complete answer, the original poster will appreciate any thoughts you have!
Post #167493
Posted Monday, April 11, 2005 7:13 PM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: General Forum Members
Last Login: Tuesday, November 29, 2005 6:11 PM
Points: 2, Visits: 1
Check out Imceda Software.
Post #173885
Posted Tuesday, April 12, 2005 5:00 PM
SSC Eights!

SSC Eights!SSC Eights!SSC Eights!SSC Eights!SSC Eights!SSC Eights!SSC Eights!SSC Eights!

Group: General Forum Members
Last Login: Tuesday, August 5, 2014 1:35 PM
Points: 865, Visits: 872

Just FYI I am testing two SQL Encryption packages, once called NetLIB and the other SecureData (by Protegrity). Both promise do do column-level encryption.

From the limited response to this quesiotn I take it that most DBA's don't use such software. Be forwarned that such software does not support all SQL datatypes and can conflict with triggers.

Bill




Post #174209
Posted Tuesday, May 3, 2005 6:28 AM
Old Hand

Old HandOld HandOld HandOld HandOld HandOld HandOld HandOld Hand

Group: General Forum Members
Last Login: Wednesday, October 2, 2013 2:46 PM
Points: 392, Visits: 82
Be wary of column level encryption. It sounds like a great idea but is miserable on performance. I also know that it is very difficult and potentially impossible to create an index on an encrypted column.
Post #179461
Posted Tuesday, May 17, 2005 1:20 PM
SSC-Addicted

SSC-AddictedSSC-AddictedSSC-AddictedSSC-AddictedSSC-AddictedSSC-AddictedSSC-AddictedSSC-Addicted

Group: General Forum Members
Last Login: Tuesday, April 15, 2014 9:57 PM
Points: 406, Visits: 210

I have had some success working with a product called 'xp_Crypt'.

 

If you would like to look into this product, check out 'www.activecrypt.com'. 

 

I had a need to encrypt account numbers that where to be accessed from an in-store kiosk.  I found this product very easy to work with and understand.  The nicest thing about it was the Free Ware version worked just fine for my requirements.  However there is a expanded version that you can by that gives you better performance and capabilities.

 

Dave




Post #183089
Posted Friday, July 22, 2005 11:43 AM
Grasshopper

GrasshopperGrasshopperGrasshopperGrasshopperGrasshopperGrasshopperGrasshopperGrasshopper

Group: General Forum Members
Last Login: Thursday, February 21, 2013 10:24 AM
Points: 11, Visits: 28
I too have used XP_crypt.

Great tool for field level encryption. Its a good way to encrypt a field (which becomes a column) so that someone who gets the table can;t use it with out the right way to decrypt it.

But there in lies a trap. Unless the database engine itself knows how to work inside the encrypted data, you can't sort it or select by it without decrypting it first. Big performance hit overall.

my use? I use it to store passwords for a web application using one way encryption. I never search by them, I don't sort by them. I just encrypt my incoming value and test for equality. very little impact from that.
Post #203650
Posted Wednesday, October 18, 2006 6:23 AM
Ten Centuries

Ten CenturiesTen CenturiesTen CenturiesTen CenturiesTen CenturiesTen CenturiesTen CenturiesTen Centuries

Group: General Forum Members
Last Login: Thursday, September 5, 2013 7:04 AM
Points: 1,197, Visits: 294

Albeit SQL Server 2005 wasn't out when you guys were writing these comments; do you now see anything against using SQL Server 2005 encryption? That is, if you can migrate your data without too much hustle?

 

Regards,

Hanslindgren




Post #316187
« Prev Topic | Next Topic »

Add to briefcase

Permissions Expand / Collapse