Re: Oracle and Encryption

From: Pedro Lopes <pedro.lopes_at_netvisao.pt>
Date: Mon, 09 Oct 2006 20:26:43 +0100
Message-ID: <newscache$w8vv6j$vnc$1@newsfront4.netvisao.pt>

If running on 10gR2, TDE (transparent data encryption) is the way to go.

http://www.oracle.com/technology/deploy/security/db_security/transparent-data-encryption/index.html

Pedro

Mladen Gogala wrote:
> On Mon, 09 Oct 2006 02:19:08 -0700, z_at_hid wrote:
>

>> Try DBMS_OBFUSCATION package for encryption and decryption.
>>
>> You may see this link to know more about security.
>>
>> VPD and there is another thing called OLS.

>
> Oracle Label Security, which used to be known as "Trusted Oracle" is, to
> my knowledge, not generally available. DBMS_OBFUSCATION was renamed to
> DBMS_OBFUSCATION_TOOLKIT and it is a simple package which allows you
> encrypt and decrypt things using DES and DES3 (aka "triple DES")
> encryption. It doesn't say anything about the keys. As far as obfuscation
> toolkit is concerned, one can have the key written on a sticky and
> attached to his screen. I even saw that once.
> DBMS_OBFUSCATION_TOOLKIT is not a security solution, nor was it ever
> intended to be one.
>
Received on Mon Oct 09 2006 - 14:26:43 CDT