Please start any new threads on our new
site at https://forums.sqlteam.com. We've got lots of great SQL Server
experts to answer whatever question you can come up with.
Author |
Topic |
bogey
Posting Yak Master
166 Posts |
Posted - 2011-05-05 : 15:15:53
|
Can anyone elaborate on how sql server 2005 stores user/passwords for sql server authentication (type of encryption) . We have an audit going on and this was one of the questions we are being asked. |
|
robvolk
Most Valuable Yak
15732 Posts |
Posted - 2011-05-05 : 15:21:38
|
I believe it's more of a hash function rather than encryption, I know Microsoft does not provide a way to decrypt the password.There are 2 undocumented functions, PWDENCRYPT() and PWDCOMPARE() that might be used internally to hash and compare the passwords. You'll find more information about them via Google/Bing. |
|
|
bogey
Posting Yak Master
166 Posts |
Posted - 2011-05-09 : 07:28:14
|
quote: Originally posted by robvolk I believe it's more of a hash function rather than encryption, I know Microsoft does not provide a way to decrypt the password.There are 2 undocumented functions, PWDENCRYPT() and PWDCOMPARE() that might be used internally to hash and compare the passwords. You'll find more information about them via Google/Bing.
Thanks |
|
|
|
|
|