Learn more about SQL Server tools

 

Tutorials          DBA          Dev          BI          Career          Categories          Events          Whitepapers          Today's Tip          Join

Tutorials      DBA      Dev      BI      Categories      Events

DBA    Dev    BI    Categories

 

Decrypting SQL Server database objects


By:   |   Read Comments (7)   |   Related Tips: 1 | 2 | More > Encryption

Problem
SQL Server offers a way to encrypt your Stored Procedures to make sure that prying eyes cannot see what is going on behind the scenes.  The problem with this method is that it is not a very secure way of encrypting the contents of your stored procedures.  In addition, since SQL Server basically stores your source code vs. a compiled version most people rely on the code that is in the database server instead of moving the code to a source control application.  Because of the need to access this code this tip outlines various methods of decrypting your encrypted database objects.

Solution
There are basically two ways that you can go about doing this; 1) you can write your own process or 2) you can download and/or purchase a tool that was developed to do just this.  Various tools exist that allow you to decrypt your database objects.

So how does encryption work?

Basically it is a simple option that you use when creating your objects. Here is a basic example using the "WITH ENCRYPTION" option.

CREATE PROCEDURE uspGetAuthors
WITH ENCRYPTION
AS
SELECT *
FROM authors
GO

After I create this stored procedure, when I try to view the contents of the stored procedure using the following command,

sp_helptext uspGetAuthors

I get this error: "The object comments have been encrypted."

Also, when trying to look at this stored procedure in Enterprise Manager I get the following error message.

To decrypt the stored procedure I used this script. This is very simple to install and use and allows you to decrypt stored procedures, view and triggers and best of all it is free.  To use this script I first created it and then ran the following command.

exec DECRYPT2K 'uspGetAuthors', 'S'

When I issue the sp_helptext statement again this is the results I get, so we can see that it decrypted the stored procedure and it is now available for editing both with Query Analyzer or Enterprise Manager.

CREATE PROCEDURE uspGetAuthors

AS
SELECT *
FROM authors

So as you can see there is not a lot to decrypting your database objects.  Also, encrypted objects are not really that secure, so this should not be your only method for securing code that you do not want others to see.

Along with the script mentioned above, here is a list of other tools that are available:

Next Steps

  • Add this tool to your SQL toolkit
  • Take a look at some these tools that are available
  • Make sure that if you are trying to keep prying eyes away from your code using the encryption option that there are ways to get to it so look for other methods


Last Update:






About the author
MSSQLTips author Greg Robidoux Greg Robidoux is the President of Edgewood Solutions and a co-founder of MSSQLTips.com.

View all my tips





More SQL Server Solutions




Post a comment or let the author know this tip helped.

All comments are reviewed, so stay on subject or we may delete your comment. Note: your email address is not published. Required fields are marked with an asterisk (*).

*Name    *Email    Notify for updates 


Get free SQL tips:

*Enter Code refresh code     



Monday, May 19, 2014 - 4:47:36 AM - muthupandi Back To Top

Function does not work.....


Thursday, May 02, 2013 - 8:57:41 PM - Alan Back To Top

I have tried this decryption procedure and the encryted procedure I tried to decrypt with this code has vanished.

 

why is that, where has it gone etc


Tuesday, January 11, 2011 - 10:32:49 AM - Greg Robidoux Back To Top

What version of SQL Server are you using?


Tuesday, January 11, 2011 - 4:56:20 AM - Prasad Back To Top

the procedure doesnt work


Tuesday, August 31, 2010 - 2:11:22 PM - grobido Back To Top
It looks like the above link no longer exists.  You can try to use this link instead:

http://www.planet-source-code.com/vb/scripts/ShowCode.asp?txtCodeId=505&lngWId=5


Monday, April 20, 2009 - 1:40:40 PM - grobido Back To Top

Take a look at this other code in the link below.  There was a comment made on the originating site.

http://www.garyweb.co.uk/decrypt_sp.sql

Not sure if this works with SQL 2005 or not.  Have not tested it.

 


Monday, April 21, 2008 - 9:57:30 PM - vvkp Back To Top

Hi,

When I use your script for decryption, the stored procs are disappearing. I am using your took for SQL2005. Any idea?


Learn more about SQL Server tools