How can we help you today? How can we help you today?

Security Problem WITH ENCRYPTION !!

I use the option "Add WITH ENCRYPTION option to stored procedures etc" in order to create a secure encrypted database with that snapshot, but, I watched that Sql-Compare can read encrypted database, then, if a Hacker uses Sql-Compare, he will be able to read and copy all my stored procedures.

I tested this with SqlBundle5 Beta1 and it has the same security problem.

Please, Urgent !, give a solution.

Best Regards,
Roberto
Roberto
0

Comments

4 comments

Sort by
  • Brian Donahue
    Hello Roberto,

    The problem is that the encryption in SQL Server objects is easily reversible. The articles about how to break it are widely published and in fact SQL Comapre has this feature only because so many customers requested it.

    To make your database more secure, you can seek a third-party encryption solution for SQL Server or upgrade to SQL Server 2005. As far as I know nobody has figured out how to decrypt objects on the newest version of Microsoft SQL Server. Certainly SQL Compare can't do this!
    Brian Donahue
    0
  • Roberto
    Ups!, This is Serious. Dou you Known any good third-party encryption solution?
    Roberto
    0
  • Brian Donahue
    We don't use any third-party encryption solutions internally, but a quick Google of the problems finds a few matches, mainly:

    http://www.database-encryption.com/sqlshield.html

    Note: we do not endorse, support, of have anything at all to do with this software!
    Brian Donahue
    0
  • Roberto
    Thanks a lot
    Roberto
    0

Add comment

Please sign in to leave a comment.