Re: Oracle Encryption

[Quoted] In article <un26gvfw6.fsf_at_us.oracle.com>,   rwessman_at_us.oracle.com wrote:
> aperez_at_ccs.neu.edu writes:
>
> > To Anyone who may be of help...
> Hopefully, I can. :-)
>
> >
> > I've just been thrown into this project 2 or 3 days ago, and I'm totally
> > new to oracle, so please excuse my dumb questions. We have an Oracle 7.3.4
> > server running on a unix server and am going to have a front end in excel on
> > WIN 95 machines. I need to make sure that transactions back and forth are
> > encrypted. I somewhat understand how it works, but am still confused. I'm
> > using SQLNet to communicate. I've heard that SQLNet itself encrypts the
 data.
> > Is this true and/or do i have to activate it or feed it encryption keys?
 Do I
> > need ANO for this part? I also know that Kerberos is going to be put into
 use
> > sometime later. I understand that ANO needs to be installed in order to use
> > Kerberos, but I also keep on seeing references to RSA and DES. Are these
 some
> > equivalents to Kerberos? I'm not sure what they are.
> We're talking about two different problems here. Fortunately, ANO solves both
> problems.
>
> First of all, there's encryption. SQL*Net by itself does not encrypt data. ANO
> encryption is needed. You don't have to create encryption keys. ANO generates
> them on the fly through Diffie-Hellman key negotiation. You do have to type
> in a seed, though. It's just a random string.
>
> There are two encryption algorithms available: RSA RC4 and DES. RC4 has
> strengths up to 128 bits. DES has strengths up to 56 bits. The exact strength
> available, though, is subject to U.S. export restrictions.
>
> As to Kerberos support, ANO supports it through an authentication adapter.
> When you buy ANO, the Kerberos adapter comes on the CD.
>
> Hope this helps,
> --
> Rick
> Rick Wessman
> Security and Directory Technologies
> Server Technologies
> Oracle Corporation
> rwessman_at_us.oracle.com
>
I found out some stuff, but this info helps alot. Thanks. One last thing that I'm curious about is; do I have to install ANO on just the server, or does it go on the client machines also? What about machines that are just going to have excel as a front end talking through SQLNet?

Thanks again,
Arturo Perez

-----------== Posted via Deja News, The Discussion Network ==---------- http://www.dejanews.com/ Search, Read, Discuss, or Start Your Own Received on Thu Oct 29 1998 - 00:00:00 CET