Tag: security

• Hash Algorithms – How does SQL Server store Passwords?

  

  2014-06-30 - General, Passwords, Security, SQL Server Internals

  How does SQL Server store its own passwords? Discover which hashing algorithm is used and how you can calculate your own password hash value in T-SQL.

  [more…]

• Auditing SQL Server Password Strength using PWDCOMPARE

  

  2014-06-27 - DMVs & CVs, General, Passwords, Security, Security

  SQL Server stores passwords as salted hash values, preventing us from directly checking or enforcing their strength. However, using PWDCOMPARE we can try to crack them to identify weak ones.

  [more…]

• The sys.key_encryptions Catalog View

  

  2014-06-23 - Cryptography, DMVs & CVs, General, Security, Security

  Do you have a symmetric key in a SQL Server database but forgot how it is encrypted? Discover how you can use the sys.key_encryptions catalog view to find out which protection mechanisms were used to encrypt the symmetric keys in the current database.

  [more…]

• Five Reasons why You Need to Encrypt Your PHI

  

  2014-06-20 - Cryptography, General, HIPAA, Security

  Are you a covered entity under the HIPAA rules and do you store PHI (Protected Health Information) in your database? Here are five reasons why you really should encrypt that data.

  [more…]

• The sys.symmetric_keys Catalog View

  

  2014-06-16 - Cryptography, DMVs & CVs, General, Security, Security

  Where do you turn if you need information about the symmetric keys in the current database? Meet the sys.symmetric_keys catalog view and discover what types of information on symmetric keys it can provide.

  [more…]