Encryption on 1 field

Is there a way to encrypt just one field in a table? If not I guess I could
use MD5. Can anybody make a suggestion on the best way to do this?
Hi
As I undestood you would like to store the passwords, am I right?
As far as I know you cannot encrypt only one field and regarding to storing
the passwords do search on internet ,there are posts (examples) by Steve
Kass how to encrypt and store them.
"DAVID S" <DAVIDS@.discussions.microsoft.com> wrote in message
news:F26C9AE8-B6A9-4EDD-8129-1A2136C8F8F8@.microsoft.com...
> Is there a way to encrypt just one field in a table? If not I guess I
could
> use MD5. Can anybody make a suggestion on the best way to do this?
|||> Is there a way to encrypt just one field in a table? If not I guess I
could
> use MD5. Can anybody make a suggestion on the best way to do this?
You can do it from clint app, or you can use 3rd party tools - check
http://www.activecrypt.com/products.html, for example.
Dejan Sarka, SQL Server MVP
Associate Mentor
www.SolidQualityLearning.com
|||Thanks for the input, I didn't think you could but it never hurts to ask.
What I want to do is encrypt credit card numbers.
"DAVID S" wrote:

> Is there a way to encrypt just one field in a table? If not I guess I could
> use MD5. Can anybody make a suggestion on the best way to do this?
|||Thank you so much, I will check on this software.
"Dejan Sarka" wrote:

> could
> You can do it from clint app, or you can use 3rd party tools - check
> http://www.activecrypt.com/products.html, for example.
> --
> Dejan Sarka, SQL Server MVP
> Associate Mentor
> www.SolidQualityLearning.com
>
>
|||Try the sofware xp_crypto 2.5
search for xp_crypto 2.5 on google
it worked in my case
though besides it i also have udf_encrypt udf_decrypt for my database
"DAVID S" <DAVIDS@.discussions.microsoft.com> wrote in message
news:F26C9AE8-B6A9-4EDD-8129-1A2136C8F8F8@.microsoft.com...
> Is there a way to encrypt just one field in a table? If not I guess I
could
> use MD5. Can anybody make a suggestion on the best way to do this?

Encryption on 1 field

Is there a way to encrypt just one field in a table? If not I guess I could
use MD5. Can anybody make a suggestion on the best way to do this?Hi
As I undestood you would like to store the passwords, am I right?
As far as I know you cannot encrypt only one field and regarding to storing
the passwords do search on internet ,there are posts (examples) by Steve
Kass how to encrypt and store them.
"DAVID S" <DAVIDS@.discussions.microsoft.com> wrote in message
news:F26C9AE8-B6A9-4EDD-8129-1A2136C8F8F8@.microsoft.com...
> Is there a way to encrypt just one field in a table? If not I guess I
could
> use MD5. Can anybody make a suggestion on the best way to do this?|||> Is there a way to encrypt just one field in a table? If not I guess I
could
> use MD5. Can anybody make a suggestion on the best way to do this?
You can do it from clint app, or you can use 3rd party tools - check
http://www.activecrypt.com/products.html, for example.
Dejan Sarka, SQL Server MVP
Associate Mentor
www.SolidQualityLearning.com|||Thanks for the input, I didn't think you could but it never hurts to ask.
What I want to do is encrypt credit card numbers.
"DAVID S" wrote:

> Is there a way to encrypt just one field in a table? If not I guess I coul
d
> use MD5. Can anybody make a suggestion on the best way to do this?|||Thank you so much, I will check on this software.
"Dejan Sarka" wrote:

> could
> You can do it from clint app, or you can use 3rd party tools - check
> http://www.activecrypt.com/products.html, for example.
> --
> Dejan Sarka, SQL Server MVP
> Associate Mentor
> www.SolidQualityLearning.com
>
>|||Try the sofware xp_crypto 2.5
search for xp_crypto 2.5 on google
it worked in my case
though besides it i also have udf_encrypt udf_decrypt for my database
"DAVID S" <DAVIDS@.discussions.microsoft.com> wrote in message
news:F26C9AE8-B6A9-4EDD-8129-1A2136C8F8F8@.microsoft.com...
> Is there a way to encrypt just one field in a table? If not I guess I
could
> use MD5. Can anybody make a suggestion on the best way to do this?

Encryption on 1 field

Is there a way to encrypt just one field in a table? If not I guess I could
use MD5. Can anybody make a suggestion on the best way to do this?Hi
As I undestood you would like to store the passwords, am I right?
As far as I know you cannot encrypt only one field and regarding to storing
the passwords do search on internet ,there are posts (examples) by Steve
Kass how to encrypt and store them.
"DAVID S" <DAVIDS@.discussions.microsoft.com> wrote in message
news:F26C9AE8-B6A9-4EDD-8129-1A2136C8F8F8@.microsoft.com...
> Is there a way to encrypt just one field in a table? If not I guess I
could
> use MD5. Can anybody make a suggestion on the best way to do this?|||> Is there a way to encrypt just one field in a table? If not I guess I
could
> use MD5. Can anybody make a suggestion on the best way to do this?
You can do it from clint app, or you can use 3rd party tools - check
http://www.activecrypt.com/products.html, for example.
--
Dejan Sarka, SQL Server MVP
Associate Mentor
www.SolidQualityLearning.com|||Thanks for the input, I didn't think you could but it never hurts to ask.
What I want to do is encrypt credit card numbers.
"DAVID S" wrote:
> Is there a way to encrypt just one field in a table? If not I guess I could
> use MD5. Can anybody make a suggestion on the best way to do this?|||Thank you so much, I will check on this software.
"Dejan Sarka" wrote:
> > Is there a way to encrypt just one field in a table? If not I guess I
> could
> > use MD5. Can anybody make a suggestion on the best way to do this?
> You can do it from clint app, or you can use 3rd party tools - check
> http://www.activecrypt.com/products.html, for example.
> --
> Dejan Sarka, SQL Server MVP
> Associate Mentor
> www.SolidQualityLearning.com
>
>|||Try the sofware xp_crypto 2.5
search for xp_crypto 2.5 on google
it worked in my case
though besides it i also have udf_encrypt udf_decrypt for my database
"DAVID S" <DAVIDS@.discussions.microsoft.com> wrote in message
news:F26C9AE8-B6A9-4EDD-8129-1A2136C8F8F8@.microsoft.com...
> Is there a way to encrypt just one field in a table? If not I guess I
could
> use MD5. Can anybody make a suggestion on the best way to do this?sql

Encryption at the database field level

Hello Everyone

I need a solution for the following problem ASAP

Configuration
SQL 2000 ENT Edition
Client - Server Application Designed in VB

I have one filed in one of my tables in a database E.g Credit Card Number. I need this fields to be Encrypted so that no body can see and mis use that information. One option is to change the application and incorporate the encryption logic into the application. Does SQL 2000 Provides some kind of Encryption at a field level? or can i manage this thing at the database level? I desperatelly want to do it at the database level.Refer to this MSDN link (http://msdn.microsoft.com/library/en-us/dnnetsec/html/SecNetHT19.asp) about using SSL communication.

Also on SQL Server level you can use MULTI-PROTOCOL netlib with ENCRYPTION option for the security, refer to books online for more information.

Encrypting Field in Database

I have existing application that we need to encrypt the field that stores
the user password. This is a SQL Server 2000 database that has a table
that stores userid and passwords.
Please let me know the procedures that I need to implement to encrypt the
password field.
Thanks,Refer to the Encryption section in the following FAQ:
http://www.sqlsecurity.com/DesktopDefault.aspx?tabid=22
-Sue
On Thu, 27 Oct 2005 09:32:13 -0700, Joe K. <Joe
K.@.discussions.microsoft.com> wrote:

>I have existing application that we need to encrypt the field that stores
>the user password. This is a SQL Server 2000 database that has a table
>that stores userid and passwords.
>Please let me know the procedures that I need to implement to encrypt the
>password field.
>Thanks,|||Hi,
refer and visit my site www.activecrypt.com .
Regards
--
Andy Davis
Activecrypt Team
---
SQL Server Encryption Software
http://www.activecrypt.com
"Sue Hoegemeier" wrote:

> Refer to the Encryption section in the following FAQ:
> http://www.sqlsecurity.com/DesktopDefault.aspx?tabid=22
> -Sue
> On Thu, 27 Oct 2005 09:32:13 -0700, Joe K. <Joe
> K.@.discussions.microsoft.com> wrote:
>
>

encrypting a field in SQL Server 2000

Hi,

I have a SSN field that I need to encrypt. Only persons who wants to get information about a user should be able to decrypt that field. What is the best way to encrypt and decrypt the ssn field? Thanks

Maybe you can write a UDF which uses some encryption algorithm to generate the encrypted data from SSN and something known by only the user and DBA (something like password salt). However there're some available softwares, for example:

http://www.appsecinc.com/products/dbencrypt/mssql/

orhttp://www.activecrypt.com/products.html

|||

I wouldn't use SQL Server to do the encrypt/decrypt for a number of reasons (It's unencrypted when sent from the web server to the database server, it's viewable with trace utilities like SQL Profiler, and you would either need to store the encrption key in the database unencrypted, or send it and then the encryption/decryption key is sent unencrypted).

I would look into the encryption stuff that .NET has built in to start.

Encrypted data size by original size, algorithm ?

I want to know encrypted data's size for designing database field size.

For example, cardnumber varchar(20) Encrypted by Triple_DES and PassPhrase, How match size does need to encrypted data store field.

I think the size does not depend to PassPhrase char length.

Regards,
Yoshihiro Kawabata

The simplest way is to just encrypt the largest piece of data that you will store using the encryption algorithm of your choice and take note of the size of the resulting blob. That will be the size of the field. There is also a formula that allows you to compute this, but it also includes the size of a header which might expand in future versions of SQL Server. I suggest to always leave several bytes more to account for changes in the format of encrypted data.

Thanks
Laurentiu

|||

Here's a post that describes how to determine the length of the encrypted data for SQL Server 2005:

http://blogs.msdn.com/yukondoit/archive/2005/11/24/496521.aspx

Thanks
Laurentiu

Encrypted data size by original size, algorithm ?

I want to know encrypted data's size for designing database field size.

For example, cardnumber varchar(20) Encrypted by Triple_DES and PassPhrase, How match size does need to encrypted data store field.

I think the size does not depend to PassPhrase char length.

Regards,
Yoshihiro Kawabata

The simplest way is to just encrypt the largest piece of data that you will store using the encryption algorithm of your choice and take note of the size of the resulting blob. That will be the size of the field. There is also a formula that allows you to compute this, but it also includes the size of a header which might expand in future versions of SQL Server. I suggest to always leave several bytes more to account for changes in the format of encrypted data.

Thanks
Laurentiu

|||

Here's a post that describes how to determine the length of the encrypted data for SQL Server 2005:

http://blogs.msdn.com/yukondoit/archive/2005/11/24/496521.aspx

Thanks
Laurentiu

Encrypt payroll fields

I need to store payroll information (pay rates) in my data warehouse.
I've search on field level encryption and most the stuff i find is for
passwords, I.E. not reversable. I need to protect the payrate field
from dba's and sa's, but I need to allow the authorized users to see
the contents.
Any ideas? Does 2005 handle this?
I don't have a web app, per se, that access's this information. however
I am using Cognos' Report Net.
thanks in advance
RobThe most common solution is to use some kind of encryption library in
your client application or middle-tier, and encrypt/decrpyt the data as
people enter it or retrieve it. In SQL2005, you could use the .NET
crypto libraries within a .NET stored proc, but you can use them
already in a .NET client application regardless of the database.

So it probably depends on what your development environment and
language are. These links might give you some ideas:

http://www.sqlsecurity.com/DesktopDefault.aspx?tabid=22
http://www.aspfaq.com/show.asp?id=2536

Simon|||SQL2005 actually has encryption built-in using either shared key or
certificates (which it can generate). Alternatively, for SQL2000 look
at xp_crypt from http://www.activecrypt.com/.

Encrypt password field

hello guys! i have a question hope you'll help me..how can i encrypt the data that is stored in my password field everytime i insert value to it and decrypt it if i want to retrieve it? thanks in advance!!I dont think you can in simple SQL. BUT some vendors (like Oracle) provide with functions specifically for that. E.g If you use Oracle 10g, you can use the Encrypt function, dbms_crypto...etc.

if you do use oracle 10g, here is a good link for that:

Mysql has a far simpler and equally powerful Encrypt function. just check out the manual if you do use Mysql.

or here is the link:

http://dev.mysql.com/doc/refman/5.0/en/encryption-functions.html

good luck|||Im sorry, somehow the link didnt show up. Here it is if you use 10g:

http://www.oracle.com/technology/pub/articles/oracle_php_cookbook/ullman_encrypt.html|||daimous, looking at all your other posts, i'm going to guess that you are using microsoft sql server, and therefore move this thread to that forum|||... in which case this will probably interest you :D

http://www.dbforums.com/showthread.php?t=1217730|||hello guys! i have a question hope you'll help me..how can i encrypt the data that is stored in my password field everytime i insert value to it and decrypt it if i want to retrieve it? thanks in advance!!
If you are decrypting passwords, you don't understand how they are supposed to be used. Passwords should not need to be decrypted.|||i need to decrypt my password from my database since i encrypted it before storing it to my database, in the first place. So before i can get the "REAL" password i need to decrypt it..right? well anyway, can i get some more inputs..|||i need to decrypt my password from my database since i encrypted it before storing it to my database, in the first place. So before i can get the "REAL" password i need to decrypt it..right?
Wrong.

You encrypt your password using some algorithm and store the results in the database.
When your user logs in with a password, thier password is encrypted using the same algorithm. If the results match what is stored in the database, the user's login is verified.

You can write a sproc to encrypt the submitted password and return success or failure after comparing to the stored encryption string.

Thus there is no need to decrypt passwords.

encrypt credit card details within SQL 2000/2005

Hi, I am hoping someone could shed some light on encrypting columns within
database tables.
What I need to do is encrypt the credit card field of a sql table. What is
the best way of going about this? This doesnt seem to be well documented.
Any help most appreciated.
Cheers, PeterSQL Server 2000 does not provide encryption functionality out of the
box, you will have to either do this on the client and sending the
already encrypted data to the server or send the data to the server
(you will have to be aware of man-in-the-middle attacks and consider
protocol encryption for securing this) and encrypt it either using
your own encryption algorythm or any other third party procedure
(often xp_s) to do this. SQl Server 2005 intriduced a new encryption
functionalty, based on either certificates or passphrases, not to
extened this explanation further you can read a lot about that in the
BOL or on the internet.
HTH, Jens K. Suessmeyer.
http://www.sqlserver2005.de
--|||For SQL 2005 look up the built-in T-SQL Encryption functionality in BOL.
For SQL 2000, either do it client-side as Jens suggested, or get some
utility XP's like this:
http://www.sqlservercentral.com/col...oolkitpart1.asp
"peter walker" <p.walker@.nospam.com> wrote in message
news:eb3yxLeRHHA.4632@.TK2MSFTNGP04.phx.gbl...
> Hi, I am hoping someone could shed some light on encrypting columns within
> database tables.
> What I need to do is encrypt the credit card field of a sql table. What is
> the best way of going about this? This doesnt seem to be well documented.
> Any help most appreciated.
> Cheers, Peter
>

encrypt a text or varchar(max) field

I understood that sql 2005 has EncryptByCert(varchar) function to encrypt data field. but varchar is limit by 8,000 chars long.
My question is:
as sql 2005 built in function, is there any way to encrypt a text or varchar(max) fieild which could be more than 8,000 chars?
Thanks
duohong

It is not recommended to encrypt data directly using certificates; instead, it is recommend to use symmetric keys to encrypt data, and certificates can be used to encrypt those symmetric keys. One reason for this is that asymmetric key encryption is much slower than symmetric key encryption. Also, asymmetric key algorithms are particularly good for key management, but are not well suited for general data encryption, which is why asymmetric and symmetric keys are in practice used together, the first for allowing secure key exchange and the second for the actual data encryption. In SQL Server 2005, the main purpose of certificates is for signing modules and for encrypting other keys, not for directly encrypting data.

Also, note that certificates are currently generated with 1024 bit length private keys and the length of data that you can encrypt with such a certificate is at most 117 bytes (1024/8 - 11 for padding). This is less than the varchar limit of 8000 characters, but is sufficient for the intended use of certificates.

Thanks
Laurentiu

Encripting a field in a table

I have inherited a database program that has a table for usernames and passwords. Unfortunetly, I must give certain users read only access to the SQL tables. Therefore, the Usernames and the passwords can be viewed. Question isw there a way of encripting this field so that it can't be read?

Thanks in advance!!!not sure i understand the question? You need to give users access to read the data in the table, but you want the data encrypted so it can't be read?|||The SQL DB is the backend and the Front end is a VBA program. I have to give certian users direct access to the tables (backend). I want to still be able to use the user/password table when users access the front end but I want to prevent users from viewing the passwords while they are accessing the tables directly from the SQL DB.|||Hi,

you can use pwdencrypt sql function., but there are certain thing u have to keep in mind..

The field should be nvarchar.
u cannt unencrypt the string after encrypting it.

select pwdencrypt('abc')

this is how u can compare 2 strings -
select pwdcompare('abc',pwdencrypt('abc'))
1 for true
0 for false.

hope this will help u.
Cheers
Gola munjal

Originally posted by Chumpie999typla
I have inherited a database program that has a table for usernames and passwords. Unfortunetly, I must give certain users read only access to the SQL tables. Therefore, the Usernames and the passwords can be viewed. Question isw there a way of encripting this field so that it can't be read?

Thanks in advance!!!

Empty spaces in the detail row..

How can I get rid of empty spaces following the text value? This is
happening for a Comments field, the text is longer and RS seems to add some
extra blank lines to the row.
i have set both the properties of the cell to "Can Increase to accomodate
contents" and "Can decrease to accomodate contents."
and using Trim () to trauncate any spaces but still does not work.
Also, is there any way to merger 2 cells vertically?You need to make the initial size of the row / textbox as small as possible.
Vertical merging of cells is not supported in the current version.
--
Brian Welcker
Group Program Manager
SQL Server Reporting Services
This posting is provided "AS IS" with no warranties, and confers no rights.
"newmem" <""> wrote in message news:eCgyAPJWEHA.2844@.TK2MSFTNGP11.phx.gbl...
> How can I get rid of empty spaces following the text value? This is
> happening for a Comments field, the text is longer and RS seems to add
> some
> extra blank lines to the row.
> i have set both the properties of the cell to "Can Increase to accomodate
> contents" and "Can decrease to accomodate contents."
> and using Trim () to trauncate any spaces but still does not work.
> Also, is there any way to merger 2 cells vertically?
>

Empty Field Query

Hi Friends,

I have one query that i have to Replace the Empty Value of a filed with some other value how can i do in SQL??

ID Phone Name
1 122 abc
2 xyz
3 444 mmm
4 525 ccc
5 nvb

Now i want replace the blank (Empty) filed with some charaters Numbers how can i do that?? any Help

Ashu

Case [Name]
 When '' Then 'Empty'
 Else [Name]
End

Empty <> IS NOT NULL

Hello,

I have a query that returns the appropriate values I need, however there is one field I'd like to add and utilize but my problem is I only want to use it if it contains data.

If I filter it with IS NOT NULL it returns all the records, including the empty records. The field is simply empty, and doesn't come back as NULL. If I filter it with =' ' , it shows all the records with the empty records only.

I need to do the opposite, be able to filter it only if it's not empty.

Any help would be appreciated.

What is your current query? ( And indicate the field you're talking about... including its type, I guess...)

>L<

|||

Figured it out myself.

For someone elses benefit I'll include what I had to do:

Filtered the desired field using LIKE '0%' .

The data the field actually contains is a yearcode-sequence code (eg. 07-555555).

Now the empty fields are gone and it only pulls the records if it has data.

I used this for a guide. http://msdn2.microsoft.com/en-us/library/ms179859.aspx

|||Thanks for replying, I figured it out.