views:

1843

answers:

4

Hi all,
I need to hash (MD5) all the password in our Sql Server 2000 database. I can easily generate a C#/VB.NET program to convert (hash) all the passwords, but I was wondering (more for my education than for a real compelling need) if it was possible to calculate MD5 hash directly in T-SQL.
Thanks to anyone who will answer.

+3  A: 

It is using this code, but it is not native to the language.

http://www.codeproject.com/KB/database/xp_md5.aspx

Daniel A. White
Thank you very much. I hoped to find a way to do it directly with SQL statements, but this is good too!
Turro
+2  A: 

In 2005 and later, you can call the HashBytes() function. In 2000, the closest thing is pwdencrypt/pwdcompare, though those functions have their own pitfalls (read the comments of the link).

Joel Coehoorn
Thank you very much for your kind reply. At the end I choose Daniel's answer because I was looking for MD5 hashing, but your one came really close and the suggestion about pwdencryt/pwdcompare made me learn something really interesting.
Turro
+2  A: 

No, there is no native TSQL command to generate MD5 hash's in SQL Server 2000.

In 2005 and above you can use the HashBytes function: http://msdn.microsoft.com/en-us/library/ms174415.aspx

samjudson
Even though I chose another answer, I anyway wanted to thank you very much for your reply.
Turro
A: 

There is nothing magical about md5, you can implement it as a pure tsql function if you want to. I'm not sure it would be fun in tsql, but there should be nothing preventing you from doing so :)