|
database
newsgroups
|
|||||||||||||||||||||||
|
|||||||||||||||||||||||
Advantages and disadvantages of stored proc encryption?Security is good for me as for developer. But what are advantages and
disadvantages of stored proc encryption? May be encrypted sp's are executing slow? Though encryption is good from security point of view, SQL Server 2000
stored procs can be easily decrypted. In terms of performance there's no difference, as the execution plan will be the same. But if you do encrypt, make sure you have the source readily available. "Oleg Cherkasenko" <o***@opel.com.ua> wrote in message Security is good for me as for developer. But what are advantages andnews:eO8n$ixnFHA.3312@tk2msftngp13.phx.gbl... disadvantages of stored proc encryption? May be encrypted sp's are executing slow? ....also, troubleshooting in the production environment becomes a bit more difficult. Like execute
the proc, compare the source (which you don't have) to the execution plan. -- Show quoteTibor Karaszi, SQL Server MVP http://www.karaszi.com/sqlserver/default.asp http://www.solidqualitylearning.com/ Blog: http://solidqualitylearning.com/blogs/tibor/ "Narayana Vyas Kondreddi" <answer***@hotmail.com> wrote in message news:udzTFmxnFHA.3540@TK2MSFTNGP10.phx.gbl... > Though encryption is good from security point of view, SQL Server 2000 > stored procs can be easily decrypted. In terms of performance there's no > difference, as the execution plan will be the same. But if you do encrypt, > make sure you have the source readily available. > -- > HTH, > Vyas, MVP (SQL Server) > SQL Server Articles and Code Samples @ http://vyaskn.tripod.com/ > > > "Oleg Cherkasenko" <o***@opel.com.ua> wrote in message > news:eO8n$ixnFHA.3312@tk2msftngp13.phx.gbl... > Security is good for me as for developer. But what are advantages and > disadvantages of stored proc encryption? > May be encrypted sp's are executing slow? > > > Oleg,
better is upload the code and its revisions to VSS Show quote "Narayana Vyas Kondreddi" wrote: > Though encryption is good from security point of view, SQL Server 2000 > stored procs can be easily decrypted. In terms of performance there's no > difference, as the execution plan will be the same. But if you do encrypt, > make sure you have the source readily available. > -- > HTH, > Vyas, MVP (SQL Server) > SQL Server Articles and Code Samples @ http://vyaskn.tripod.com/ > > > "Oleg Cherkasenko" <o***@opel.com.ua> wrote in message > news:eO8n$ixnFHA.3312@tk2msftngp13.phx.gbl... > Security is good for me as for developer. But what are advantages and > disadvantages of stored proc encryption? > May be encrypted sp's are executing slow? > > > > Thank you All.
By the way, what about encryption in sql2005 editions? Show quote "Oleg Cherkasenko" <o***@opel.com.ua> wrote in message news:eO8n$ixnFHA.3312@tk2msftngp13.phx.gbl... > Security is good for me as for developer. But what are advantages and > disadvantages of stored proc encryption? > May be encrypted sp's are executing slow? > > The encryption is trivial to break with freely available tools.
Encrypted code has very little to do with real security. It's pretty much a cosmetic feature that *may* limit low-level meddling by incompetent users but won't protect you against smart hackers. -- David Portas SQL Server MVP --  |
|||||||||||||||||||||||
Other interesting topics