locked
Encrypt specific column(s) ? RRS feed

  • Question

  • Hello,

    In regards to like SSN column what's the recommended way to abouts?

    Is Always Encrypted or something else the way to go and does it encrypt the entire Table/DB or can it be to specific column(s) level?

    Also whichever method if Always Encrypted or something else how much performance impact around to consider?

    Thanks in advance.

    Tuesday, March 19, 2019 4:55 PM

All replies

  • Always Encrypted is a new feature included in SQL Server 2016 for encrypting sensitive column data at rest and in motion. This represents an important difference from the original column-level encryption, which is concerned only with data at rest.

    Always Encrypted also differs from Transparent Data Encryption (TDE), which is also limited to data at rest. In addition, TDE can be applied only to the database as a whole, not to individual columns.

    The sensitive column dats  is only revealed within the application or middle tier, and nowhere in between the application and the database.  

    Performance could be negatively impacted by its use.   

    Please go through below link for more details.https://sqlperformance.com/2015/08/sql-server-2016/perf-impact-always-encrypted

    ===================================================================
    Please click "Mark as Answer" if it solved your issue and/or "Vote as helpful" if it helped. This can be beneficial to other community members reading this thread.


    • Edited by Suman Zakka Tuesday, March 19, 2019 5:21 PM
    Tuesday, March 19, 2019 5:20 PM
  • Thanks Sum an for the quick reply.  Much appreciated.

    But what's recommended for SQL Server 2008?
    Tuesday, March 19, 2019 6:34 PM
  • You can encrypt your data using a symmetric or asymmetric key to encrypt specific columns. 

    https://www.mssqltips.com/sqlservertip/2431/sql-server-column-level-encryption-example-using-symmetric-keys/

    Tuesday, March 19, 2019 7:19 PM
  • Thanks Sum an for the quick reply.  Much appreciated.

    But what's recommended for SQL Server 2008?
    In complete sincerity and respect...upgrading is the best recommendation, as 2008 goes out of support in July 2019.

    22 years of database experience, most with SQL Server. Please 'Mark as answered' those posts that helped you.

    Tuesday, March 19, 2019 7:52 PM
  • Currently for SQL Server 2016 Always Encrypted...when encrypting column(s) are there any different types of Algorithims to choose or is it only one.

    Thanks.

    Tuesday, March 19, 2019 9:08 PM
  • Hi,
    Always Encrypted supports two types of encryption: randomized encryption and deterministic encryption. Please refer to Selecting Deterministic or Randomized Encryption.
    Best regards,
    Cathy Ji

    MSDN Community Support
    Please remember to click "Mark as Answer" the responses that resolved your issue, and to click "Unmark as Answer" if not. This can be beneficial to other community members reading this thread. If you have any compliments or complaints to  MSDN Support, feel free to contact MSDNFSF@microsoft.com

    Wednesday, March 20, 2019 8:57 AM
  • Hello,

    Please click "Mark as Answer" if it solved your issue and/or "Vote as helpful" if it helped. This can be beneficial to other community members reading this thread and closing this thread.

    Wednesday, March 20, 2019 5:22 PM