(SQL Server) PBES1 Password-Based Encryption (PBE)

Demonstrates how to implement password-based encryption according to the PKCS #5 v2.0: Password-Based Cryptography Standard (published by RSA Laboratories). This example uses PBES1, which ise based on the PBKDF1 function and an underlying block cipher such as RC2, DES, etc.

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows

-- Important: See this note about string length limitations for strings returned by sp_OAMethod calls.
--
CREATE PROCEDURE ChilkatSample
AS
BEGIN
    DECLARE @hr int
    -- This example assumes the Chilkat API to have been previously unlocked.
    -- See Global Unlock Sample for sample code.

    DECLARE @crypt int
    -- Use "Chilkat_9_5_0.Crypt2" for versions of Chilkat < 10.0.0
    EXEC @hr = sp_OACreate 'Chilkat.Crypt2', @crypt OUT
    IF @hr <> 0
    BEGIN
        PRINT 'Failed to create ActiveX component'
        RETURN
    END

    -- Set properties for PBES1 encryption:

    EXEC sp_OASetProperty @crypt, 'CryptAlgorithm', 'pbes1'
    EXEC sp_OASetProperty @crypt, 'PbesPassword', 'mySecretPassword'

    -- Set the underlying PBE algorithm (and key length):
    -- For PBES1, the underlying algorithm must be either
    -- 56-bit DES or 64-bit RC2 
    -- (this is according to the PKCS#5 specifications at
    -- http://www.rsa.com/rsalabs/node.asp?id=2127   )
    EXEC sp_OASetProperty @crypt, 'PbesAlgorithm', 'rc2'
    EXEC sp_OASetProperty @crypt, 'KeyLength', 64

    -- The salt for PBKDF1 is always 8 bytes:
    EXEC sp_OAMethod @crypt, 'SetEncodedSalt', NULL, '0102030405060708', 'hex'

    -- A higher iteration count makes the algorithm more
    -- computationally expensive and therefore exhaustive
    -- searches (for breaking the encryption) is more difficult:
    EXEC sp_OASetProperty @crypt, 'IterationCount', 1024

    -- A hash algorithm needs to be set for PBES1:
    EXEC sp_OASetProperty @crypt, 'HashAlgorithm', 'sha1'

    -- Indicate that the encrypted bytes should be returned
    -- as a hex string:
    EXEC sp_OASetProperty @crypt, 'EncodingMode', 'hex'

    DECLARE @plainText nvarchar(4000)
    SELECT @plainText = 'To be encrypted.'

    DECLARE @encryptedText nvarchar(4000)
    EXEC sp_OAMethod @crypt, 'EncryptStringENC', @encryptedText OUT, @plainText


    PRINT @encryptedText

    -- Now decrypt:
    DECLARE @decryptedText nvarchar(4000)
    EXEC sp_OAMethod @crypt, 'DecryptStringENC', @decryptedText OUT, @encryptedText


    PRINT @decryptedText

    EXEC @hr = sp_OADestroy @crypt


END
GO