June 28, 2005 at 10:14 am
I am trying to decide which is a better method to use to encrypt data in SQL Server 2000. There are several 3rd party tools that utilize either extended procedures to provide encryption or encrypt the data with a control instantiated through use of sp_OACreate. I am a little worried about both of these techniques b/c of the chance that under load they could fail and require the rebooting of the database server to fix. The other technique I was thinking about using is to do the encryption at the application level instead of the database level. Has anyone had any experience with any off these methodologies in a high volume OLTP shop? Any advice on which method provides the best results in terms of stability, security and performance would be appreciated.
Thanks
Chari.R.V.
June 28, 2005 at 3:07 pm
Typically using 3rd party tools to encrypt the data on the fly in the database can imply serious performance overhead. I would think that encrypting at the application level would as well. I would be curious as well if anyone has any encryption options that do not imply a major impact on production performance.
June 28, 2005 at 3:19 pm
Well, thanks for your suggestion. However I have another problem if I do the Encryption at the application level, how do I handle database level function.
(for eg if I encrypt the salaray column in the employee table, if I need to do some kind of aggregration operation on the encrypted columns, how do I handle any idea.... )
I hope that this can be handled by using Extended SP decrypt the data in the Stored procedure using Extended SP and do the aggregration or what ever. However I would like to know is there any better way to handel this problem.Thanks in advance.
Chari.R.V.
Viewing 3 posts - 1 through 3 (of 3 total)
You must be logged in to reply to this topic. Login to reply