I’ve been tasked with encrypting several years worth of sensitive data (don’t ask) stored in a SQL Server 2000 Database. I need to encrypt both historical data and come up with a process to encrypt and decrypt new data as it flows through the system.
Edit: The processes that produce the data are not the same as the process that will consume the data, so I cannot easily implement a solution outside of SQL Server.
Most of the solutions out there seem to use extened stored procedures that call dlls that must be installed on the server.
The best I’ve seen so far is here, the tools are free but you have to register at the site.
Are there any better solutions out there?
use .net or whatever your process is that reads/writes to your database
otherwise if I steal your hardrive I have everything I need to decrypt, it should NOT live on the same box
last year there was an incident in a data center in Chicago where over 20 servers were stolen!