I am currently designing a web application where the data needs to be stored encrypted.

Planned technologies used:

  • ASP.NET Core API
  • ASP.NET Core Entity Framework
  • MS SQL Server 2016
  • any Web Frontend

Because of the specification we need to store all data encrypted in the database.

Which would be a good approach to achieve this while still be able to use the Entity Framework & LINQ, so the developer does not have to take care about the encryption.

Is it possible to encrypt the whole database?

To clarify, the encryption between the web frontend & the API isn't something that's related to this question.

SQL 2016 came up with the new encryption feature. Please take a look.

http://www.databasejournal.com/features/mssql/exploration-of-sql-server-2016-always-encrypted-part-1.html

It is not a good idea to encrypt a whole database for the performance reasons. Go through the article. The encryption & decryption happens with the help of ADO.NET layer.

  • ASP.Net Core currently does not support Always Encrypted (yet) - stackoverflow.com/a/41175581/5235385 – phhbr Apr 7 '17 at 11:48
  • Yeh, you may be right.. Did you check it yourself. MS couldn't have missed this important feature. – Karan Apr 7 '17 at 11:55

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Not the answer you're looking for? Browse other questions tagged or ask your own question.