Can you suggest any other method of passing the password to the procedure
and still be FIPS compliant? Or any other way to achive the same result?
Also want to know that when SQL Server Management Studio opens a connection
using sql user and password, how is the password sent to the SQL Server? Is
it in clear text? In other words, is SQL Server Management Studio FIPS
compliant?
You can't do it with symmetric encryption (AES, Triple DES, etc.) because
SQL Server can't import and export symmetric keys. You only need the public
key of an asymmetric key pair to actually encrypt the data. It would be an
interesting proof of concept if you could make it work - you'll be limited
in what you can encrypt asymmetrically in each string though. The limit is
117 bytes of 8-bit plain text or 58 bytes of Unicode plaintext. Probably
more than adequate for most passwords, however.
--
Thanks
Michael Coles
SQL Server MVP
Author, "Expert SQL Server 2008 Encryption"
(http://www.apress.com/book/view/1430224649)
----------------
"Rajeswar" <Raje...@discussions.microsoft.com> wrote in message
news:72F66050-8BF0-4CB6...@microsoft.com...
--
Thanks
Michael Coles
SQL Server MVP
Author, "Expert SQL Server 2008 Encryption"
(http://www.apress.com/book/view/1430224649)
----------------
"Rajeswar" <Raje...@discussions.microsoft.com> wrote in message
news:72F66050-8BF0-4CB6...@microsoft.com...