Share via

  • Article

DECRYPTBYASYMKEY (Transact-SQL)

Decrypts data with an asymmetric key.

Topic link iconTransact-SQL Syntax Conventions

Syntax

DecryptByAsymKey (Asym_Key_ID , { 'ciphertext' | @ciphertext } 
    [ , 'Asym_Key_Password' ] )

Arguments

  • Asym_Key_ID
    Is the ID of an asymmetric key in the database. Asym_Key_ID is int.

  • ciphertext
    Is a string of data that has been encrypted with the asymmetric key.

  • @ciphertext
    Is a variable of type varbinary that contains data that has been encrypted with the asymmetric key.

  • Asym_Key_Password
    Is the password that was used to encrypt the asymmetric key in the database.

Return Types

varbinary with a maximum size of 8,000 bytes.

Remarks

Encryption/decryption with an asymmetric key is very costly compared to encryption/decryption with a symmetric key. We do not recommend using an asymmetric key when you work with large datasets, such as user data in tables.

Permissions

Requires CONTROL permission on the asymmetric key.

Examples

The following example decrypts ciphertext that was encrypted with asymmetric key JanainaAsymKey02, which was stored in AdventureWorks2008R2.ProtectedData04. The returned data is decrypted using asymmetric key JanainaAsymKey02, which has been decrypted with password pGFD4bb925DGvbd2439587y. The plaintext is converted to type nvarchar.

SELECT CONVERT(nvarchar(max),
    DecryptByAsymKey( AsymKey_Id('JanainaAsymKey02'), 
    ProtectedData, N'pGFD4bb925DGvbd2439587y' )) 
AS DecryptedData 
FROM [AdventureWorks2008R2].[Sales].[ProtectedData04] 
WHERE Description = N'encrypted by asym key''JanainaAsymKey02''';
GO