RE: using obfuscation

I've seen this type of thing done using domain indexes, i.e. defining your own indextypes. Looked like a bit of work, though.

HTH,
Gary

Gary Kirsh
Next Extent Consulting

-----Original Message-----
From: Steiner, Randy [mailto:RASTEIN_at_NYCT.com] Sent: Tuesday, September 10, 2002 11:58 AM To: Multiple recipients of list ORACLE-L Subject: RE: using obfuscation

Don,

It seems like a real good idea, but what am I putting inside my call to the encrypt function in my Create View statement?

Randy

 -----Original Message-----

Sent:	Tuesday, September 10, 2002 10:13 AM
To:	Multiple recipients of list ORACLE-L
Subject:	Re: using obfuscation

 << File: Card for Don Jerman >> What about...

create view my_data as select de_encrypt(sensitive_data) as clear_sensitive_data where
sensitive_data = encrypt('CLEAR TEXT') ?

This lets you create an index on the sensitive data without decrypting it, and
the function need only be called once on the clear text.

Caveat: no idea if this should work :)

"Steiner, Randy" wrote:

> Hi all,
>
> I have downloaded the Metalink Notes on implementing dbms_obfuscation. I
am
> using multiple front ends on the database, so the way I plan to implement
> the de-encryption is with a de-encrypt function in a view.
>
> Create View my_data
> AS
> Select de_encrypt(sensitive_data) AS sensitive_data
> ,other_data
> FROM original_table
> ;
>
> If I select from the view with a where clause on other_data, the response
> time is fine. If I select from the view with a where clause on
> sensitive_data, I do a full table scan and which takes about 15 minutes.
> The de-encrypt function is copied from a Metalink note, nothing fancy.
>
> Since I have various front ends, I can not de-encrypt the data in the
front
> end. The only way I can think of is with the function in a view, but the
> response time is unacceptable. Does anyone have any thoughts on this?
>
> Thanks
> Randy
> --
> Please see the official ORACLE-L FAQ: http://www.orafaq.com
> --
> Author: Steiner, Randy
> INET: RASTEIN_at_NYCT.com
>
> Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
> San Diego, California -- Public Internet access / Mailing Lists
> --------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from). You may
> also send the HELP command for other information (like subscribing).

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: Steiner, Randy
  INET: RASTEIN_at_NYCT.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may