Entity Framework with Sql Server Column Level Encryption

Question

I have a requirement to encrypt a number of database columns (in Sql Server 2012). It has been decided that we should use column level encryption (implemented in sql server). On the application side i will be building a web api on top of some complex domain models. I really want to utilize Entity Framework's code first approach, to maintain a clean domain model). Does anyone have a workable solution here that does not involve resorting back to stored procedures? Ideally I would like to somehow manipulate the sql generated by entity framework to wrap certain fields to do the sql encryption / decryption functions.

Ideally , something like:

modelBuilder.Entity<MyTable>().ToTable("Table1").Property(p => p.SensativeData).encrypt("keyName",authenticatorFunc);

After some looking around , I am still left with few options for Entity Framework. NHibernate on the other hand does support this through field formulas and User Types, for read and write respectively. — Noel
– Noel, Commented Jan 23, 2015 at 5:41

Nitin Dominic · Accepted Answer · 2016-06-06 09:42:31Z

11

In SQL Server 2012, column level encryption can be done mainly in two ways ie,

Defining Custom Encryption function in Entity framework. this blog
SQL Cell Level Encryption implementation done in entity framework in dbcontext Class (execute open symmetric key code here) using this blog and using stored procedure (which contain decryption code for specified field in tables ) retrieve result sets.

In SQL server 2016 there is new feature ie, Always encrypted and has its implementation in entity framework here.

answered Jun 6, 2016 at 9:42

Nitin Dominic

2,7291 gold badge23 silver badges23 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

user584018 Over a year ago

Thanks a lot. I am able to solve using first blog, super helpful

DeepSpace101 · Accepted Answer · 2017-03-20 23:32:59Z

3

Crypteron has a free Entity Framework adapter, CipherDb, that can work with any SQL Server. In fact, Crypteron CipherDb works with any Entity Framework compatible database - even MySQL, PostGreSQL and more.

You can annotate the data model with [Secure] or name a property to something like Secure_SocialSecurityNumber (the Secure_ is the key part) and CipherDb automatically performs data encryption, tamper protection, secure key storage, secure key distribution, caching, key roll overs, ACLs and more. You can also use Crypteron to protect streams, files, objects, message queues, noSQL etc.

You can find the sample apps on GitHub at https://github.com/crypteron/crypteron-sample-apps

Disclaimer: I work there and we do have a free community edition which anyone can use.

edited Mar 20, 2017 at 23:32

answered Mar 20, 2017 at 23:17

DeepSpace101

13.8k12 gold badges85 silver badges135 bronze badges

2 Comments

TPAKTOPA Over a year ago

Hi, is it possible, to use CipherDB, without account on crypteon site ?

trigger_segfault Over a year ago

@TPAKTOPA It seems you can use the NuGet package ChipherDB.EF6. However it sadly seems that there's no .Net Standard support.

Collectives™ on Stack Overflow

Entity Framework with Sql Server Column Level Encryption

2 Answers 2

1 Comment

2 Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

1 Comment

2 Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related