Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Mailing Lists -> Oracle-L -> Re: DBMS_OBFUSCATION_TOOLKIT

Re: DBMS_OBFUSCATION_TOOLKIT

From: Arup Nanda <orarup_at_hotmail.com>
Date: Fri, 16 Jan 2004 12:19:35 -0800
Message-ID: <F001.005DD0A4.20040116121935@fatcity.com>








Yes. As long as your KEY_STRING is same, the encrypted value will be the same.
 
Consider:
 
SQL> exec :i := rawtohex(utl_raw.cast_to_raw (dbms_obfuscation_toolkit.DES3Encrypt (input_string=>'1
2345678', key_string=>'123456789012345678901234')))
 
PL/SQL procedure successfully completed.
 
SQL> print i
 
I
------------------------------------------
FB90F134036ABD29
 
Do it again.
 
SQL> exec :i := rawtohex(utl_raw.cast_to_raw (dbms_obfuscation_toolkit.DES3Encrypt (input_string=>'1
2345678', key_string=>'123456789012345678901234')))
 
PL/SQL procedure successfully completed.
 
SQL> print i
 
I
--------------------------------------------------------------------------------
FB90F134036ABD29
 
The encrypted version is the same. This also brings up another good point - the key plays a vital role in the encryption process and should be as randomized as possible. In Oracle 9i you have the DESGetKey function.
 
The other question is why do you want to do this? Perhaps you are trying to build a integrity assurance system that calculates an encrypted value before delivery, and then after delivery to confirm that data has not been tampered with in transit. If so, I would receommend using a hash, not encryption, i.e. MD5 procedure in the same package. It's less taxing on resources and does exactly what you want to do. Key management becomes easier in hashing, too.
 
Hope this helps.
 
Arup
----- Original Message -----
From: Paula Winkler
To: Multiple recipients of list ORACLE-L
Sent: Friday, January 16, 2004 11:24 AM
Subject: DBMS_OBFUSCATION_TOOLKIT

Hi Listers,
 
Does the Oracle dbms_obfuscation_toolkit (DOT) support generating a non-randomized encrypted result?  In other words, can we encrypt something like ‘international’ and get the same encrypted result each time we pass ‘international’ to the DOT?

- Paula W.



Do you Yahoo!?
Yahoo! Hotjobs: Enter the "Signing Bonus" Sweepstakes
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Arup Nanda
  INET: orarup_at_hotmail.com

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).
Received on Fri Jan 16 2004 - 14:19:35 CST

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US