Home » RDBMS Server » Security » DES,Triple DES and AES (Oracle 10g, 10.2.0.1, Linux)
DES,Triple DES and AES [message #303050] Wed, 27 February 2008 16:12 Go to next message
plshelp
Messages: 205
Registered: January 2007
Senior Member
Hi all,

I just joined a new development company and currently DES has been used for data encryption. I am trying to gather some details about upgrading to either Triple DES or AES. I did have a look at few documents on comparing those, but if any of you experts have any suggestion onto which is better Triple DES or AES, I will really appreciate any kind of information.

Thank you!
Re: DES,Triple DES and AES [message #303105 is a reply to message #303050] Thu, 28 February 2008 00:20 Go to previous messageGo to next message
Michel Cadot
Messages: 68718
Registered: March 2007
Location: Saint-Maur, France, https...
Senior Member
Account Moderator
AES definitively and especially with 256bit or more key.

Regards
Michel
Re: DES,Triple DES and AES [message #303244 is a reply to message #303050] Thu, 28 February 2008 09:12 Go to previous messageGo to next message
plshelp
Messages: 205
Registered: January 2007
Senior Member
Thanks, Michael. Is there any specific advantage for using AES?? I think AES is only for 10g and 11i(DBMS Crypto package). But we have 9i databases as well. I think I will have to use Triple DES(opfuscation kit) for 9i databases and AES for 10g databases.
Is that advisable?

Thanks much!
Re: DES,Triple DES and AES [message #303250 is a reply to message #303244] Thu, 28 February 2008 09:21 Go to previous messageGo to next message
Michel Cadot
Messages: 68718
Registered: March 2007
Location: Saint-Maur, France, https...
Senior Member
Account Moderator
Quote:
Is there any specific advantage for using AES??

Created about 10 years after the previous DES. Isn't it a good reason in security matter?

If you work in 9i, you have to use 3DES unless you load some Java AES classes in Oracle JVM.

Regards
Michel
Re: DES,Triple DES and AES [message #303968 is a reply to message #303050] Mon, 03 March 2008 08:39 Go to previous messageGo to next message
plshelp
Messages: 205
Registered: January 2007
Senior Member
Thanks, Michael. We have more 9i databases than 10g, so I guess we will go with Triple DES for now..

Any clue of what the script change will be for DES to Triple DES??

Thank you!
Re: DES,Triple DES and AES [message #303980 is a reply to message #303968] Mon, 03 March 2008 09:51 Go to previous message
Michel Cadot
Messages: 68718
Registered: March 2007
Location: Saint-Maur, France, https...
Senior Member
Account Moderator
I don't know, use DES3 instead of DES, use long enough key, in brief follow what is in the documentation.
http://download.oracle.com/docs/cd/B10501_01/appdev.920/a96612/d_obtoo2.htm#10242

Regards
Michel
Previous Topic: Grant Objects
Next Topic: HOW TO AVOID TRUNCATE AND DROP IN ORACLE SQL DEVELOPER
Goto Forum:
  


Current Time: Wed Dec 04 03:36:39 CST 2024