Re: Ques. re. Oracle Obfuscation

From: DA Morgan <damorgan_at_psoug.org>
Date: Mon, 13 Jun 2005 19:56:46 -0700
Message-ID: <1118717827.439375@yasure>

ohaya wrote:
> Hi,
>
> I was wondering if anyone is aware if there are any best practices
> regarding key management when using Oracle's DBMS_OBFUSCATION_TOOLKIT?
> I'm particularly interested in how we can protect the
> encryption/decryption key that we would use.
>
> Thanks,
> Jim

Best practice is to upgrade to 10g as DBMS_OBFUSCATION_TOOLKIT is not all that secure by current standards. If you can't upgrade far more information would be required to advice you.

Personally: I like to hide things in plain sight.

-- 
Daniel A. Morgan
http://www.psoug.org
damorgan_at_x.washington.edu
(replace x with u to respond)

Received on Mon Jun 13 2005 - 21:56:46 CDT