security - How do I encrypt SQL Server data in application level and still be able to query it with LIKE? -


situation:

  • i developing asp.net website organization using microsoft sql server , c# .net. intranet website.
  • the ms sql server database contains sensitive data in columns. there 320,000 rows in 6 tables. data top-secret me because manually prepared , entered in tables. mission tedious, took me 1 year. said, not want ever readable copy of data.
  • i not have permission intranet server. must give published website , database data , schema else host it. protect .net code.
  • the department staff administering database server host website. not trustful, , must not readable copy of data. have complete access , full permission manage sql server.
  • i need query encrypted data like.
  • although stored procedures best me, not mind writing select statements in .net.
  • the readable string @ 100 characters long. encrypt system.security.cryptography.aescryptoserviceprovider , store in database in nvarchar(300). encrypted string stored in database @ 300 characters long. pattern not exceed 100 characters.

what have done (please correct me if wrong):

  • i considered database build-in encryption/decryption functionality. have complete access server able decrypt data.

  • i considered encrypting data in application level, using .net, , creating clr function callable sql server. clr function decrypt data in same select statement. how prevent server administrators using clr function decrypt data?

specific question: can protect data database administrators, , still able query like? if not possible, best practice in case? can prevent database server administrators using clr function?

  1. for each query download strings client, decrypt them , search them.
  2. or, use https://en.wikipedia.org/wiki/homomorphic_encryption unrealistic.
  3. or, generate possible substrings found like. encrypt them , store them. then, can equality match on them. n character string there n*n/2 substrings. encryption breaks down short strings because attacker can deduce duplicate characters , on.

Comments

Post a Comment

Popular posts from this blog

javascript - Using jquery append to add option values into a select element not working -

i'm looking dynamically populate select element names of items stored array. for reason it's not working , i'm not sure why. html: <div class="col-md-4 col-md-offset-4"> <select class="select1"> </select> , <select class="select2"> </select> </div> note i'm using bootstrap layout. here's jquery i'm using try , populate ".select1" jquery: select: function() { $.each(state.greens, function(index, value) { $(".select1").append("<option value =' " + index + " '>" + state.greens[index].name + "</option>"); }); } note function 'select' stored within object called 'display'. state.greens name of array i'm trying access. so @ end of html page call display.select(); call function. no error messages showing in console. also, saw question: appending
Read more

Android soft keyboard reverts to default keyboard on orientation change -

i'm building android soft keyboard , can't seem fix bug - have arabic , qwerty keyboard , when rotate device on qwerty keyboard (or arabic shift), it's if program has "restarted" , becomes arabic keyboard without shift. the onsaveinstancestate(bundle savedinstancestate) not work because application not extend activity inputmethodservice . i put following in android manifest android:configchanges="keyboard|keyboardhidden|orientation" android:windowsoftinputmode="stateunchanged|adjustresize"> i tried using @override public void onconfigurationchanged(configuration newconfig) { super.onconfigurationchanged(newconfig); log.i(mydebug, "config changed " + currentkeyboard.equals(qwerty)); } however, currentkeyboard.equals(qwerty)) results false , made sure true before orientation change. any appreciated. i think applications fault. if application restarting on orientation change
Read more

jquery - javascript onscroll fade same class but with different div -

i new @ javascript , want learn new. there wrong code : why div fades @ same time. i want ask how fade different div s same class name.can me , explain me. thanks in advance. javascript: $(window).scroll(function(){ if ($( "div.fade" ).offset().top - $(window).scrolltop() <= 100){ $('.fade').addclass( "fade-in"); } else { $('.fade').removeclass("fade-in"); } }); here jsfiddle onscroll = function () { var scrolltop = $(this).scrolltop() ; $("div.fade").each(function(){ if(($(this).offset().top - scrolltop) <= 100){ $(this).toggleclass("fade-in"); } }) }
Read more