SQL Server

PBES1 Password-Based Encryption (PBE)

See more Encryption Examples

Demonstrates how to implement password-based encryption according to the PKCS #5 v2.0: Password-Based Cryptography Standard (published by RSA Laboratories). This example uses PBES1, which ise based on the PBKDF1 function and an underlying block cipher such as RC2, DES, etc. SQL Server

-- Important: See this note about string length limitations for strings returned by sp_OAMethod calls.
--
CREATE PROCEDURE ChilkatSample
AS
BEGIN
    DECLARE @hr int
    -- This example assumes the Chilkat API to have been previously unlocked.
    -- See Global Unlock Sample for sample code.

    DECLARE @crypt int
    EXEC @hr = sp_OACreate 'Chilkat.Crypt2', @crypt OUT
    IF @hr <> 0
    BEGIN
        PRINT 'Failed to create ActiveX component'
        RETURN
    END

    -- Set properties for PBES1 encryption:

    EXEC sp_OASetProperty @crypt, 'CryptAlgorithm', 'pbes1'
    EXEC sp_OASetProperty @crypt, 'PbesPassword', 'mySecretPassword'

    -- Set the underlying PBE algorithm (and key length):
    -- For PBES1, the underlying algorithm must be either
    -- 56-bit DES or 64-bit RC2 
    -- (this is according to the PKCS#5 specifications at
    -- http://www.rsa.com/rsalabs/node.asp?id=2127   )
    EXEC sp_OASetProperty @crypt, 'PbesAlgorithm', 'rc2'
    EXEC sp_OASetProperty @crypt, 'KeyLength', 64

    -- The salt for PBKDF1 is always 8 bytes:
    EXEC sp_OAMethod @crypt, 'SetEncodedSalt', NULL, '0102030405060708', 'hex'

    -- A higher iteration count makes the algorithm more
    -- computationally expensive and therefore exhaustive
    -- searches (for breaking the encryption) is more difficult:
    EXEC sp_OASetProperty @crypt, 'IterationCount', 1024

    -- A hash algorithm needs to be set for PBES1:
    EXEC sp_OASetProperty @crypt, 'HashAlgorithm', 'sha1'

    -- Indicate that the encrypted bytes should be returned
    -- as a hex string:
    EXEC sp_OASetProperty @crypt, 'EncodingMode', 'hex'

    DECLARE @plainText nvarchar(4000)
    SELECT @plainText = 'To be encrypted.'

    DECLARE @encryptedText nvarchar(4000)
    EXEC sp_OAMethod @crypt, 'EncryptStringENC', @encryptedText OUT, @plainText


    PRINT @encryptedText

    -- Now decrypt:
    DECLARE @decryptedText nvarchar(4000)
    EXEC sp_OAMethod @crypt, 'DecryptStringENC', @decryptedText OUT, @encryptedText


    PRINT @decryptedText

    EXEC @hr = sp_OADestroy @crypt


END
GO