Google Answers Logo
View Question
Q: Encryption with SQL Trigger ( Answered,   0 Comments )
Subject: Encryption with SQL Trigger
Category: Computers > Algorithms
Asked by: jmh-ga
List Price: $50.00
Posted: 05 Sep 2002 14:14 PDT
Expires: 05 Oct 2002 14:14 PDT
Question ID: 62061
I want to find a script or buy a license for a pre-canned
application/script that will allow me to encrypt data that is being
stored in a Microsoft SQL 2000 database field. The unique requirement
is that I want to do this via a SQL Insert trigger, so that on insert the
trigger will take plain text and encrypt that value that is being
inserted into the field. It's being used for a credit card numbers, so
it can't be a "home grown" algorithm, 3DES or better is preferred.
Subject: Re: Encryption with SQL Trigger
Answered By: answerguru-ga on 05 Sep 2002 15:01 PDT
Hi jmh-ga,

What you are looking for is actually called a stored procedure in the
SQL Server 2000 environment. The idea behind stored procedures is that
they can be called upon during another operation (such as a trigger
definition in your case).

A company called Communications Horizons seems to have just the
procedures that you are looking for - they call it the NetLib
Encryptionizer API. Here is the description they have on their

"You can perform dynamic column encryption in views, procedures and
triggers in SQL Server or MSDE (Microsoft Database Engine) with our 
easy-to-use APIs.  They are implemented as Extended Stored Procedures,
Stored Procedures, and User Defined Functions (UDF). These APIs extend
the functionality of Encryptionizer alone. They can be used in
addition to, or instead of whole-database encryption.

The primary use for the APIs is to apply column-level or table-level
encryption.  However, there are many other uses.  For example, you can
use them to encrypt miscellaneous non-database files on the server,
such as document and text files. You can use them to create encrypted
packets to transmit over the internet or WAN (the receiver must also
be using Encryptionizer for SQL Server or Encryptionizer DE). Yet
another use is to impose multiple passwords (e.g., use one password
for MDF files, another password for encrypting columns)."

There is also a diagram-aided description of how the APIs actually
work. Although they don't state whether or not their algorithms are
3DES, it seems very thorough:

Want a comparison of this product to Microsoft's Encrypted File
System? They've got that available as well:

There is also a fairly in-depth discussion of how this product
protects credit card information. Of course the actual algorithm is
not provided :)

As far as pricing is concerned, they don't give that information on
the website, but they do mention that several schemes are available
based on:
Per server 
Per PC 
Per site 
Per company 
EZ OEM (no reporting) 

There is also a free 30 day evaluation so you can try it out:

If you haven't made a decision already, here is a set of stored
procedures designed to provide encryption capability using various
encryption algorithms. Although it is geared towards T-SQL
(transact-SQL), it will work just as well under a SQL Server 2000
environment. This is a free product:

(there are no breaks in this URL...take it as one line if it doesn't
display correctly)

Although you are increasing the security around your data by providing
some sort of encryption, it is important to realize that this does not
make your data completely secure. This message thread points out
several of the vulnerabilities present when using stored procedures:

So it is also important that your server that is holding the DBMS be
physically secure, and that any information passing through it via a
network should be secured as well.

IF you have any problems understanding any of the above information
please feel free to post a clarification and I will respond promptly.



Request for Answer Clarification by jmh-ga on 05 Sep 2002 15:23 PDT
Thanks for the quick response. This seems like a small company, maybe
a one man shop. Can you find any other companies, better known, that
have a simlar product?

Clarification of Answer by answerguru-ga on 05 Sep 2002 20:53 PDT
I've actually done quite a bit of digging around trying to find some
other companies that offer similar products but to no avail. Looks
like a pretty good one though doesn't it? I was quite impressed myself
(if you couldn't tell by my answer :)).


Request for Answer Clarification by jmh-ga on 06 Sep 2002 12:53 PDT
Found another company, a Microsoft certified partner, Protegrity

Clarification of Answer by answerguru-ga on 06 Sep 2002 15:07 PDT
Yes, I took a look through their site...I'm not surprised it didn't
have a very high ranking on Google. I went strictly for technical
content and this site seems to emphasize business lingo more than
anything (with the exception of the white papers buried in the back).

Anyhow, it seems that you have a few choices now, so good luck with
your encryption endeavours.

There are no comments at this time.

Important Disclaimer: Answers and comments provided on Google Answers are general information, and are not intended to substitute for informed professional medical, psychiatric, psychological, tax, legal, investment, accounting, or other professional advice. Google does not endorse, and expressly disclaims liability for any product, manufacturer, distributor, service or service provider mentioned or any opinion expressed in answers or comments. Please read carefully the Google Answers Terms of Service.

If you feel that you have found inappropriate content, please let us know by emailing us at with the question ID listed above. Thank you.
Search Google Answers for
Google Answers  

Google Home - Answers FAQ - Terms of Service - Privacy Policy