For encryption, dbcc checkcatalog includes these consistency checks:
For each encryption key row in sysobjects, sysencryptkeys is checked for the existence of a row defining that key.
For each column in syscolumns marked for encryption, the existence of the key is checked in sysobjects and sysencryptkeys.
dbcc checkcatalog ensures that:
The corresponding base key is present in sysencryptkeys for every key copy in sysencryptkeys. If the base key is not present, Adaptive Server issues an error.
For every key copy, the corresponding uid is present in sysusers. If the uid is not present, Adaptive Server issues an error.
For every decrypt default defined on a column, that the corresponding decrypt default is present in sysobjects and sysattributes. If the corresponding decrypt default is not present, Adaptive Server issues an error.
