Please start any new threads on our new site at https://forums.sqlteam.com. We've got lots of great SQL Server experts to answer whatever question you can come up with.

 All Forums
 SQL Server 2005 Forums
 SQL Server Administration (2005)
 Encryption Issue

Author  Topic 

t63094
Starting Member

1 Post

Posted - 2008-09-25 : 16:33:05
Hi,

My app has half terabyte of data across 38 databases/5 servers, SQL 2005.

I have to encrypt some data that is on most of the databases and data moves around depending on how old it is. I also have to search against this data.

The issue: All encryption methods available except RC4_128/RC4 encode the same string to different encrypted varbinary field. To search, I have to decrypt all records. I can't do this due to performance issues.

RC4_128/RC4 encrypt to the same encrypted field, but I can't encrypt on one database and decrypt on another. The others can do this. I did export the Service Master Key from one server to the others and use the same master key, Certificate and Symmetric Key

Has anyone run into this situation? I need an encryption/decryption method that is exportable to all databases and encrypts a string identically so that searching is possible without decrypting all records.

Thanks,

Steve

clarkbaker1964
Constraint Violating Yak Guru

428 Posts

Posted - 2008-09-26 : 00:45:01
one method would be to create an encrypted key word table, with a joining table that contained the encrypted keyword and the primary key of the row containing the same value.
You could then accept the input values from the interface, encrypt them then do a search matching the encrypted values.
You would not have to decrypt the row when doing the search cause you already have the words cataloged, the key word table being encrypted would still provide the level of security you need.


You can do anything at www.zombo.com
Go to Top of Page
   

- Advertisement -