Re: Can oracle support encryption on some sensitive field in database?

Hi!

• On november 09 Richard Kuhler wrote:

 RK> Jim Kennedy wrote:
>> Look at the dbms_obsfucation package.

 RK> <snip>

 RK> Unfortunately, dbms_obfuscation doesn't pass his first requirement.

 >>>>> 1. encryption key should be at least 128-bit key

 RK> from the oracle docs...

 RK> "... the DES key length for encryption is fixed at 56 bits; you  RK> cannot alter this key length."

 RK> To achieve 128 bits, I believe he's going to have to use an external  RK> routine (e.g. java or c).

AFAIR, dbms_obfuscation supports the 3DES with 112-bit effective key length as well
This should be enough for symmetric encryption: if 10 billion computers would check 10 billion keys per second, it would take ~1 million years to find the key.
By the time when (dramatically) more powerful computers have been designed, Oracle will release the next version of the dbms_obfuscation, that supports AES (256 bit) or something else :)

Bye

[SQL Batch: Oracle automation] http://sqlbatch.com/sb/ Received on Sun Nov 11 2001 - 14:17:27 CST