Dynamic SQL and digital signatures in SQL Server 2005

re: Dynamic SQL and digital signatures in SQL Server 2005

Adam Machanic — Thu, 10 May 2007 19:29:39 GMT

Great timing on this post -- I'm doing a webcast on this topic tomorrow for MSDN:

http://msevents.microsoft.com/CUI/WebCastEventDetails.aspx?EventID=1032334738

Pythian Group Blog » Log Buffer #44: a Carnival of the Vanities for DBAs

Pythian Group Blog » Log Buffer #44: a Carnival of the Vanities for DBAs — Fri, 11 May 2007 19:52:59 GMT

PingBack from http://www.pythian.com/blogs/477/log-buffer-44-a-carnival-of-the-vanities-for-dbas

re: Dynamic SQL and digital signatures in SQL Server 2005

creif — Thu, 17 May 2007 20:18:00 GMT

Using your excellent samples I have pretty much worked out everything that I need to encrypt one column, including maintaining both the

encrpyted data and a one way hash for searches. I have a view which decrypts the data properly when the symmetric key has been opened (and obviously returns null when the key is not open).

I want the view to return the decrypted data only when the user is accessing the database from a single application. This application maintains a single database connection per session. My thought was to open the key when the database connection is established by the application and close it when the application exits, thereby granting access only through the application. Is that an acceptable practice?

If I do that, should I protect the key with a password that is then compiled in the application so that I can open the key? This means that every installation will have a key protected by the same password. Or is there a better way to do that? Does this post on digital signing have any relevance to my situation?

re: Dynamic SQL and digital signatures in SQL Server 2005

raulga — Fri, 18 May 2007 07:48:27 GMT

Thanks a lot for your comments. I am glad I am able to help.

We have discussed this particular topic (security based on application identity) in great detail in the forum. Below is a link to that particular thread. http://forums.microsoft.com/MSDN/ShowPost.aspx?PostID=793129&SiteID=1

I invite you to continue the discussion in the forum so more people have a chance to read and benefit from it.

Thanks a lot,

-Raul

web

web — Tue, 29 Jan 2008 01:06:31 GMT

web website domain website http://manieboddy.oceansfree.com/ web