Re: Oracle Encryption

Just a word.. I beleive ANO is an "extra cost option". check with your oracle Rep.

aperez_at_ccs.neu.edu wrote:

> In article <un26gvfw6.fsf_at_us.oracle.com>,
> rwessman_at_us.oracle.com wrote:
> > aperez_at_ccs.neu.edu writes:
> >
> > > To Anyone who may be of help...
> > Hopefully, I can. :-)
> >
> > >
> > > I've just been thrown into this project 2 or 3 days ago, and I'm totally
> > > new to oracle, so please excuse my dumb questions. We have an Oracle 7.3.4
> > > server running on a unix server and am going to have a front end in excel on
> > > WIN 95 machines. I need to make sure that transactions back and forth are
> > > encrypted. I somewhat understand how it works, but am still confused. I'm
> > > using SQLNet to communicate. I've heard that SQLNet itself encrypts the
 data.
> > > Is this true and/or do i have to activate it or feed it encryption keys?
 Do I
> > > need ANO for this part? I also know that Kerberos is going to be put into
 use
> > > sometime later. I understand that ANO needs to be installed in order to use
> > > Kerberos, but I also keep on seeing references to RSA and DES. Are these
 some
> > > equivalents to Kerberos? I'm not sure what they are.
> > We're talking about two different problems here. Fortunately, ANO solves both
> > problems.
> >
> > First of all, there's encryption. SQL*Net by itself does not encrypt data. ANO
> > encryption is needed. You don't have to create encryption keys. ANO generates
> > them on the fly through Diffie-Hellman key negotiation. You do have to type
> > in a seed, though. It's just a random string.
> >
> > There are two encryption algorithms available: RSA RC4 and DES. RC4 has
> > strengths up to 128 bits. DES has strengths up to 56 bits. The exact strength
> > available, though, is subject to U.S. export restrictions.
> >
> > As to Kerberos support, ANO supports it through an authentication adapter.
> > When you buy ANO, the Kerberos adapter comes on the CD.
> >
> > Hope this helps,
> > --
> > Rick
> > Rick Wessman
> > Security and Directory Technologies
> > Server Technologies
> > Oracle Corporation
> > rwessman_at_us.oracle.com
> >
> I found out some stuff, but this info helps alot. Thanks. One last thing
> that I'm curious about is; do I have to install ANO on just the
> server, or does it go on the client machines also? What about machines
> that are just going to have excel as a front end talking through SQLNet?

>

>


> -----------== Posted via Deja News, The Discussion Network ==----------


> http://www.dejanews.com/       Search, Read, Discuss, or Start Your Own