Click here to monitor SSC
SQLServerCentral is supported by Red Gate Software Ltd.
 
Log in  ::  Register  ::  Not logged in
 
 
 
        
Home       Members    Calendar    Who's On


Add to briefcase

Encryption Performance Expand / Collapse
Author
Message
Posted Friday, February 29, 2008 10:03 AM
Old Hand

Old HandOld HandOld HandOld HandOld HandOld HandOld HandOld Hand

Group: General Forum Members
Last Login: Friday, April 04, 2014 9:05 AM
Points: 336, Visits: 766
I'd like to know if anyone has any statistics for quantifying the impact that encrypting SQL Server communications with signed certificates will impose on a server.

For instance, something like "by enabling encryption all communication will be slowed by x% due to the overhead".

I don't know if this information is available or possible to get, so any help would be appreciated.

Thanks,

John
Post #462547
Posted Friday, February 29, 2008 8:22 PM


SSChampion

SSChampionSSChampionSSChampionSSChampionSSChampionSSChampionSSChampionSSChampionSSChampionSSChampion

Group: General Forum Members
Last Login: Yesterday @ 12:06 PM
Points: 10,910, Visits: 12,546
I don't know of any stats on this, but I have always wondered why encrypt at the SQL Server? This means that the data is now unencrypted on the wire to and from the SQL Server. Why not encrypt/unencrypt in the app? Then your data is protected the whole way.



Jack Corbett

Applications Developer

Don't let the good be the enemy of the best. -- Paul Fleming

Check out these links on how to get faster and more accurate answers:
Forum Etiquette: How to post data/code on a forum to get the best help
Need an Answer? Actually, No ... You Need a Question
How to Post Performance Problems
Crosstabs and Pivots or How to turn rows into columns Part 1
Crosstabs and Pivots or How to turn rows into columns Part 2
Post #462767
Posted Sunday, March 02, 2008 10:41 AM


SSC-Dedicated

SSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-Dedicated

Group: Administrators
Last Login: Yesterday @ 4:31 PM
Points: 32,780, Visits: 14,941
There are reasons to encrypt in the database, protects data in backups, loss of database, etc. However if it's a big deal, the wire should be encrypted as well. There's less concern of that with internal applications as most networks are switched, it would require a few people to trace the data on the wire, etc.

There's no way to tell what the load will be. The CPU will have to decrypt and encrypt, you have limits on some encryption with data sizes (asymmetric keys), you don't necessarily want to encrypt all data, etc. It requires some testing to determine the load for your application.







Follow me on Twitter: @way0utwest

Forum Etiquette: How to post data/code on a forum to get the best help
Post #462925
« Prev Topic | Next Topic »

Add to briefcase

Permissions Expand / Collapse