RE: Transparent Data Encryption

Ethan

>Anyone used this feature yet in 10G R2 and have any idea what type of
>CPU overhead is added for encrypting all/most of the data in a
>database.

TDE is not meant to encrypt all/most of the data in a database. Overhead for CPU and/or database size could be a reason. But there are more...

• not all datatypes are supported
• FK cannot be specified on encrypted columns
• only "regular" (i.e. not FBI) b*tree indexes are supported
• for indexes NO SALT have to be specified
• index range scans are available only for equality searches

And probably many more that I don't remember right now.

>Going to go look at the docs now, but does this also encrypt
>the network traffic or just encrypt the data on the server?

Data is encrypted in database blocks only. If you need encryption over the network you \ have to use Advanced Security Option (or some tunneling tricks...).

HTH
Chris

--
http://www.freelists.org/webpage/oracle-l