Re: DBMS_OBFUSCATION_TOOLKIT

From: du3 <sburz_at_sbriz.com>
Date: Mon, 03 Nov 2003 09:11:34 +0100
Message-ID: <bo52nh$naa$1@serv1.iunet.it>

sybrandb_at_yahoo.com wrote:
> "Fabio Tirapelle" <fabio.tirapelle_at_siag.it> wrote in message news:<bntg9k$6b8$1_at_serv1.iunet.it>...
>

>>Hi.
>>
>>I use the DBMS_OBFUSCATION_TOOLKIT to encrypt the information.
>>I use the dbms_obfuscation_toolkit.DESEncrypt(
>>               input_string => input_string,
>>               key_string => key_string,
>>               encrypted_string => encrypted_string ).
>>I have the following problem. When I pass the input_string parameter I know
>>the DBA has the possibility to see the input_string querying the v$sqlarea.
>>Is there a method to hide the parameter so that nobody see the values except
>>the client?
>>
>>Thanks

>
>
>
> No, there isn't. If you don't trust the DBA, have him replaced.

and get a new dba you don't know? can i trust him?

> There will be always be personnel, which can see everything.

huh? why? are you crazy? there should NEVER be someone wich can see everything.
there is a law in italy wich prohibits even the dba to see everything: http://tinyurl.com/tf0c

> If you don't want that, take the server on your back, and move to some
> scarcely inhabited region of Italy, or move to the Vatican.

please document yourself before posting comments like this.

> Sybrand Bakker

> Senior Oracle DBA

   ^^^^^^

lol :))

i need solutions, not comments like yours. Received on Mon Nov 03 2003 - 02:11:34 CST