What Is the Purpose of WITH ENCRYPTION?

Question

What Is the Purpose of WITH ENCRYPTION?

slayrexx

SSC Journeyman

Points: 78
More actions
June 16, 2008 at 3:04 pm

#125823

Can someone please help me understand the usefulness of encrypting a stored procedure?

Viewing 6 posts - 1 through 5 (of 5 total)

You must be logged in to reply to this topic. Login to reply

Adam Angelini SSCrazy Eights Points: 8548 More actions · Answer 1

I see this mostly used in "packaged" applications that have a SQL backend. It's so you can't use the logic in their sprocs. I have rarely seen this used in "in house" applications

slayrexx SSC Journeyman Points: 78 More actions · Answer 2

Thanks for that. To recap, it makes sense to encrypt client or distributed object, not necessarily objects that will remain on a central server, even a serve to which those clients my connect?

Adam Angelini SSCrazy Eights Points: 8548 More actions · Answer 3

If you want to hide the text from anyone who has access to view the object definition, that is when you will want to use encryption.

GRE (Gethyn Ellis) SSCrazy Eights Points: 9602 More actions · Answer 4

so i fyou have written your own appication then you may want to encrypt your SP's etc so your customers cannot see the underlying code...

Gethyn Elliswww.gethynellis.com

Vijaya Kadiyala SSCrazy Eights Points: 9119 More actions · Answer 5

Hi

At times, it is needed that you encrypt the text of stored procedures containing sensitive information. SQL Server provides the WITH ENCRYPTION to encrypt the text of the stored procedure.

CREATE procedure [dbo].[Ten Most Expensive Products Encyrpt]

WITH ENCRYPTION AS

SET ROWCOUNT 10

SELECT Products.ProductName AS TenMostExpensiveProducts, Products.UnitPrice

FROM Products

ORDER BY Products.UnitPrice DESC

Once the stored procedure has been created WITH ENCRYPTION, attempts to view the stored procedure returns a message specifying that the text is encrypted:

EXEC sp_helptext usp_SEL_EmployeePayHistory

'The text for object 'Ten Most Expensive Products Encyrpt' is encrypted.'

One note of caution. Save the original text of the stored procedure before encrypting it, as there is no straightforward way to decode the encrypted text. One hack is to attach a debugger to the server process and retrieve the decrypted procedure from memory at runtime.

Check out the below link

http://www.sqlservercurry.com/2008/02/how-to-encrypt-stored-procedure-in-sql.html

Thanks -- Vj

http://dotnetvj.blogspot.com

Thanks -- Vijaya Kadiyala
www.dotnetvj.com
SQL Server Articles For Beginers