Security Problem WITH ENCRYPTION !!

Roberto

I use the option "Add WITH ENCRYPTION option to stored procedures etc" in order to create a secure encrypted database with that snapshot, but, I watched that Sql-Compare can read encrypted database, then, if a Hacker uses Sql-Compare, he will be able to read and copy all my stored procedures.

I tested this with SqlBundle5 Beta1 and it has the same security problem.

Please, Urgent !, give a solution.

Best Regards,
Roberto

Brian Donahue

Hello Roberto,

The problem is that the encryption in SQL Server objects is easily reversible. The articles about how to break it are widely published and in fact SQL Comapre has this feature only because so many customers requested it.

To make your database more secure, you can seek a third-party encryption solution for SQL Server or upgrade to SQL Server 2005. As far as I know nobody has figured out how to decrypt objects on the newest version of Microsoft SQL Server. Certainly SQL Compare can't do this!

Roberto

Ups!, This is Serious. Dou you Known any good third-party encryption solution?

Brian Donahue

We don't use any third-party encryption solutions internally, but a quick Google of the problems finds a few matches, mainly:

http://www.database-encryption.com/sqlshield.html

Note: we do not endorse, support, of have anything at all to do with this software!

Roberto

Thanks a lot