Category: General

• Cryptographic Terminology – A Glossary

  

  2014-03-21 - Cryptographic Terminology, Cryptography, Fundamentals, General, Security, Series

  Cryptographic terminology can be sometimes somewhat “cryptic”. This post starts out a series to provide a glossary of cryptographic terms. Each post in this series will cover one cryptographic expression in detail.

  [more…]

• The Extent (A Storage Wednesday Post)

  

  2014-03-19 - General, Series, SQL Server Internals, Storage Wednesday

  SQL Server organizes database pages in groups of 8 called extents. An extent is the smallest unit that SQL Server will reserve on disk. However, smaller tables are still possible through mixed extents. Read on to get all the details.

  [more…]

• CRYPT_GEN_RANDOM: Generating Cryptographically Secure Random Numbers in T-SQL

  

  2014-03-17 - Cryptography, General, Security

  While not perfect, the T-SQL function CRYPT_GEN_RANDOM() generates cryptographically secure random number values using the Windows Crypt-API. Read on to get all the details on how to use it and when to avoid it.

  [more…]

• The Ownership Chaining Quandary or How to Circumvent an Explicit DENY

  

  2014-03-16 - General, Security, Security Pitfalls

  Ownership chaining is a powerful tool for permission management. However, in some situations it can be misused to gain unauthorized access to a securable. Read on to see this in action.

  [more…]

• The Ownership Chain – How the Securable Owner affects Permission Enforcement in SQL Server

  

  2014-03-14 - General, Security

  The ownership chain enables us to setup guarded access in SQL Server. Guarded access means to grant securable access only through a procedure or view. That module can then be used to enforce additional security requirements. Read on to see how the ownership chain makes this possible.

  [more…]