Re: obfuscate an integer and store in a number column

On Fri, 11 Feb 2005 17:08:13 +0000, Pedro Lopes <pedro.lopes_at_netvisao.pt> wrote:

>but the requirement is to have data encrypted !
>not hidden away... like using mechanisms as
>views, vpds, label security.
>
>This is a costumer requirement...
>The application already hides the price from the user, but the
>requirement is to have the price encrypted also.
>
>thanks
>pedro

Well, in that case you need an encryption algorithm which takes a plaintext of length N and creates a ciphertext of length <=N Blowfish (among others) is capable of this.

You also need to consider how to manage and store the encryption key(s).

And you must find and buy the software to implement it (There are free modules out there though)

Sounds temptating ?

If not, then explain the risks and costs of this approach to your customer, and they will probably more willlingly turn to the fine Oracle security features mentioned elsewhere in this thread.

• Kenneth Koenraadt