Cryptographic functions (Transact-SQL)

Applies to: SQL Server Azure SQL Database Azure SQL Managed Instance

These functions support digital signing, digital signature validation, encryption, and decryption.

Symmetric encryption and decryption

ENCRYPTBYKEY

DECRYPTBYKEY

ENCRYPTBYPASSPHRASE

DECRYPTBYPASSPHRASE

KEY_ID

KEY_GUID

DECRYPTBYKEYAUTOASYMKEY

KEY_NAME

SYMKEYPROPERTY

 

Asymmetric encryption and decryption

ENCRYPTBYASYMKEY

DECRYPTBYASYMKEY

ENCRYPTBYCERT

DECRYPTBYCERT

ASYMKEYPROPERTY

ASYMKEY_ID

 

Signing and signature verification

SIGNBYASYMKEY

VERIFYSIGNEDBYASYMKEY

SIGNBYCERT

VERIFYSIGNEDBYCERT

IS_OBJECTSIGNED

 

Symmetric decryption, with automatic key handling

DecryptByKeyAutoCert

 

Encryption hashing

HASHBYTES

 

Certificate copying

CERTENCODED (Transact-SQL)

CERTPRIVATEKEY (Transact-SQL)

 

See also

Functions
Encryption Hierarchy
Permissions Hierarchy (Database Engine)
CREATE CERTIFICATE (Transact-SQL)
CREATE SYMMETRIC KEY (Transact-SQL)
CREATE ASYMMETRIC KEY (Transact-SQL)
Security Catalog Views (Transact-SQL)