password hash

It seems like there is no built in procedure for making a password hash in
SQL2000. Am I wrong.
Do I have to make it from scratch myself or is there samples out there?

/Jens Ulrik"Jens U. K." <1jk2@.3bsopatent4.dk> wrote in message
news:i3t8d.3709$UU4.720@.news.get2net.dk...
> It seems like there is no built in procedure for making a password hash in
> SQL2000. Am I wrong.
> Do I have to make it from scratch myself or is there samples out there?
> /Jens Ulrik

That's correct - the usual solution is to encrypt/decrypt in the client
application using the Win32 CrpytoAPI, or some other suitable API, then
store only the encrypted password in the database:

http://www.sqlsecurity.com/DesktopDefault.aspx?tabid=22

Simon|||"Simon Hayes" <sql@.hayes.ch> wrote in message
news:41626a41$1_1@.news.bluewin.ch...
> "Jens U. K." <1jk2@.3bsopatent4.dk> wrote in message
> news:i3t8d.3709$UU4.720@.news.get2net.dk...
>> It seems like there is no built in procedure for making a password hash
>> in SQL2000. Am I wrong.
>> Do I have to make it from scratch myself or is there samples out there?
>>
>> /Jens Ulrik
> That's correct - the usual solution is to encrypt/decrypt in the client
> application using the Win32 CrpytoAPI, or some other suitable API, then
> store only the encrypted password in the database:

Hmm, it would have so easy with a stored procedure. Only problem is that
neither the SQL-server nor the HTTP-server are in my possesion. So
unfortunately I do not have access to "whatever" API I want :-( But as I
recall the provider have ASP.NET and I think there is some encryption
functions in there...

/Jens Ulrik|||The asp.net System.Web.Security.FormsAuthentication class contains a static
method for hashing passwords that you may find helpful:

string password = "god";
string passwordFormat = "sha1";

string encryptedPassword =
FormsAuthentication.HashPasswordForStoringInConfig File(password,passwordFormat);

"Jens U. K." <1jk2@.3bsopatent4.dk> wrote in message
news:3bu8d.4068$xP1.2605@.news.get2net.dk...
> "Simon Hayes" <sql@.hayes.ch> wrote in message
> news:41626a41$1_1@.news.bluewin.ch...
>>
>> "Jens U. K." <1jk2@.3bsopatent4.dk> wrote in message
>> news:i3t8d.3709$UU4.720@.news.get2net.dk...
>>> It seems like there is no built in procedure for making a password hash
>>> in SQL2000. Am I wrong.
>>> Do I have to make it from scratch myself or is there samples out there?
>>>
>>> /Jens Ulrik
>>
>> That's correct - the usual solution is to encrypt/decrypt in the client
>> application using the Win32 CrpytoAPI, or some other suitable API, then
>> store only the encrypted password in the database:
> Hmm, it would have so easy with a stored procedure. Only problem is that
> neither the SQL-server nor the HTTP-server are in my possesion. So
> unfortunately I do not have access to "whatever" API I want :-( But as I
> recall the provider have ASP.NET and I think there is some encryption
> functions in there...
> /Jens Ulrik