Encryption

[George]

Hi,

I am building application that uses MS SQL 2005 as a backend that stores
sensative data (ssn, passwords....). Are there any good articles out there
that discusses the options?

Thanks

 

[Martin Z]

MS has the Cryptography Application Block, for starters.

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnpag2/html/crypto1.asp

 

[warlord]

Personally I'd not store password in the database at all. I tend to store
only an MD5 hash of the users password and use my application to provide the
interaction between validating the hash of the users supplied password with
the hash stored, but never the password itself.

 

[Mark Rae]

Personally I'd not store password in the database at all. I tend to store
only an MD5 hash of the users password and use my application to provide
the interaction between validating the hash of the users supplied password
with the hash stored, but never the password itself.

I do exactly the same.