Re: Database Encryption

From: Gus Spier <gus.spier_at_gmail.com>
Date: Thu, 7 Jun 2018 06:20:48 -0400
Message-ID: <CAG8xnifcyiabkWCb_aB+Fg95TLK7GHWCjzh6SY0spiToRCzJhQ_at_mail.gmail.com>



I don't get to play with database encryption, so I speak entirely theoretically.
Databases I get to work with all have extensive indexes (?indices?). All of the indexes are supported by data files. If the data file supporting an index is encrypted, does the index automatically get rebuilt? Are statistics automatically regenerated?

Regards,
Gus

On Thu, Jun 7, 2018 at 3:29 AM Stefan Koehler <contact_at_soocs.de> wrote:

> Hello Arun,
> two things came to my mind.
>
> 1) CPU increase due to execution plan change
> You can have execution plan changes as you had to move (e.g. with
> dbms_redefinition) the data to encrypt it after enabling TDE and this can
> lead to a CPU increase.
>
> 2) CPU type
> Your current used CPU type does not support hardware cryptographic
> acceleration or you are using TDE column encryption. For more details
> please check this white paper on page 3:
> http://www.oracle.com/technetwork/database/security/twp-transparent-data-encryption-bes-130696.pdf
>
> P.S.: Despite all that there may be cases where TDE really has a
> performance impact (had some nice discussion about that at Hotsos last
> year).
>
> Best Regards
> Stefan Koehler
>
> Independent Oracle performance consultant and researcher
> Website: http://www.soocs.de
> Twitter: _at_OracleSK
>
> > Arun Chugh <arun.chugh1610_at_gmail.com> hat am 7. Juni 2018 um 05:51
> geschrieben:
> >
> > All,
> >
> > We have encrypted almost all the datafiles of the database, post that
> the performance of the database degraded to almost 40-50%
> >
> > Could anyone suggest what is the other alternative method that we can
> use in order to secure data with bit performance impact.
> >
> > Regards,
> >
> > Arun
> --
> http://www.freelists.org/webpage/oracle-l
>
>
>

--
http://www.freelists.org/webpage/oracle-l
Received on Thu Jun 07 2018 - 12:20:48 CEST

Original text of this message