Potentially you did not get an answer because the question is too open
ended.

Encrypting and decrypting values in an object can be easily handled in a
number of ways, with or without NHibernate. The real issues are how are you
going to query the data and how do you manage relations.

If you are encrypting the Id values as they are stored that creates one set
of problems, but as this data is not business data does it need to be
encrypted?

Encrypting the business data becomes a problem when you want to search for
partial string values. This can only be done if all rows are held in a cache
in unencrypted format. Can your system handle this kind of caching? Is it
allowed by the business?

Answering these questions will begin to put bounds on the problem space and
then you may get better answers.

John Davidson

On Wed, Aug 25, 2010 at 10:20 AM, Sal <[email protected]> wrote:

> OK, here goes. This topic has come up several times over the past few
> years, with no real solid answer. I'm hoping maybe this time there we
> will be some help.
>
> I have the unfortunate experience of dealing with a client who insists
> on using column level encryption in sql server, not just the newer
> TDE. This usually means using a sql function to encrypt/decrypt the
> column during queries and inserts/updates. Is there any guidance
> around implementing this with Nhibernate....without sprocs???
>
> --
> You received this message because you are subscribed to the Google Groups
> "nhusers" group.
> To post to this group, send email to [email protected].
> To unsubscribe from this group, send email to
> [email protected]<nhusers%[email protected]>
> .
> For more options, visit this group at
> http://groups.google.com/group/nhusers?hl=en.
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"nhusers" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/nhusers?hl=en.

Reply via email to