I have some extended classes (utilizing both HMAC and cryptographic tech), and I'm hoping to utilize them for a new product's database from said database's stored procedures (inclusive of time logging, user-event logging, etc.) under SQL Server.
Can anyone recommend a resource detailing the best ways to achieve this or optionally advise a more preferable approach to low-level, data-layer access-security that includes automated interaction logging?
Do you have the option of encrypting at the application layer? This will ensure that it's encrypted going over the wire as well as ensuring that a nosy DBA doesn't see the unencrypted information using Profiler or a trace.
custom source libraries accessible to SQL Server... no problem says Microsoft... anything developed in C# / VB.NET can be taken via CIL / CLR directly into SQL Server to be used as a custom library, etc. within stored procedures, etc.
I'm off to finalize & test...