Re: Secure file transfer in PL/SQL

djs wrote:
> Daniel,
>
> Thanks again for responding, I sincerely do appreciate your desire to
> help me.
>
> But your statement that, "Encryption is encryption is encryption in
> that if it is the same methodology the tool doesn't matter" doesn't fit
> here since the Data Encryption Standard (DES) by the American National
> Standards Institute (ANSI) (used in Oracle's data obfuscation toolkit)
> is not the same algorithm as PGP encryption. PGP uses the public key
> (two keys) approach and DES has a single key, shared by sender and
> receiver.
>
> I would love to be incorrect here, but I will certainly discuss this
> with the bank. If there is a chance that I could use the delivered
> Oracle obfuscation toolkit, I will certainly do so.
>
> Do you know if a file encrypted with DES can somehow be decrypted with
> PGP?
>
> -Dan-
>
> DA Morgan wrote:

>> djs wrote:
>>> Daniel,
>>>
>>> I appreciate your desire to help me save time and money.
>>> Unfortunately, my requirements are coming from the bank.  This is a
>>> free service they offer and I don't have a choice in how I submit the
>>> data--unless I want to pay them to modify their system.
>>>
>>> When you say that, "PGP isn't necessary unless you are paid by the hour
>>> and need to increase your hours between now and the end of the
>>> project",  I'm not sure how you mean that.  Could you please explain
>>> how using PGP would increase the time I would spend coding?  Since I
>>> can't use the Oracle obfuscation toolkit, I need to code and am just
>>> looking NOT to spend more time and money--just help finding the
>>> easiest/quickest solution given my constraints on this project.
>>>
>>> Thanks again for all you are doing to help me sort this out.
>>> -Dan-
>>>
>>> DA Morgan wrote:
>>>> djs wrote:
>>>>> Daniel,
>>>>>
>>>>> Thank you for responding to my post, I appreciate your offer to help.
>>>>>
>>>>> I apologize for being dim, but I don't see a "PGP" option in the
>>>>> obfuscation toolkit.  As I mentioned, the bank requires either PGP
>>>>> encryption or a secure connection (HTTPS).  Or, will the transportable
>>>>> tablespace provide a secure connection?  What information do I need to
>>>>> provide to my DBA to enable him to establish a transportable tablespace
>>>>> with the bank?  I have just started to make contact with the bank and
>>>>> don't know their platform yet.  Will a transportable tablespace
>>>>> solution be possible if they are not on Oracle?
>>>>>
>>>>> Sorry for asking so many questions, but I need more detail in order to
>>>>> implement a solution and move this fairly tiny project into production.
>>>>>  Transferring a file should not feel like so much work!
>>>>>
>>>>> Thanks again for helping,
>>>>> -Dan-
>>>> PGP isn't in the obfuscation toolkit. PGP isn't necessary unless you are
>>>> paid by the hour and need to increase your hours between now and the end
>>>> of the project.
>>>> --
>>>> Daniel A. Morgan
>>>> University of Washington
>>>> damorgan_at_x.washington.edu
>>>> (replace x with u to respond)
>>>> Puget Sound Oracle Users Group
>>>> www.psoug.org
>> PGP is encryption. You can achieve the same (or similar) encryption
>> using the obfuscation toolkit. Encryption is encryption is encryption
>> in that if it is the same methodology the tool doesn't matter ...
>> except that the obfuscation toolkit is built into Oracle and thus is
>> far easier (fewer hours, less cost, totally supported) than is PGP.
>>
>> Same thing ... one built-in and easy to use the other a bolt-on.
>> --
>> Daniel A. Morgan
>> University of Washington
>> damorgan_at_x.washington.edu
>> (replace x with u to respond)
>> Puget Sound Oracle Users Group
>> www.psoug.org

You are likely correct as I have been using the enhanced 10g built-in DBMS_CRYPTO which includes DES, 2DES, and AES up to 256bit.

Any reason you can't use 10gR2? With 11g coming out next year 9i will begin desupport reasonably soon. Not a good place to be just beginning a new application.

-- 
Daniel A. Morgan
University of Washington
damorgan_at_x.washington.edu
(replace x with u to respond)
Puget Sound Oracle Users Group
www.psoug.org