Re: Suggestion reg. encryption ??

From: Pete Finnigan <oracle_list_at_peterfinnigan.demon.co.uk>
Date: Mon, 29 Sep 2003 05:29:51 -0800
Message-ID: <F001.005D15D6.20030929052951@fatcity.com>

Hi Jp

On the specific issue of encryption your main concern will be hiding the encryption key from any prying eyes. There is a couple of links to papers on my site about encryption in Oracle http://www.petefinnigan.com /orasec.htm especially the link to Aarons paper which discusses the key hiding issue. I also wrote a paper for iDefense.com earlier this year about encrypting data in Oracle databases. It was slightly high level as it was aimed at what the possibilities and tools available are. It is not in the public domain so i cannot send out copies but if you email them you might be able to get a copy from them.

hope this helps a bit

kind regards

Pete
--

Pete Finnigan
email:pete_at_petefinnigan.com
Web site: http://www.petefinnigan.com - Oracle security audit specialists Book:Oracle security step-by-step Guide - see http://store.sans.org for details.

--

Please see the official ORACLE-L FAQ: http://www.orafaq.net
--

Author: Pete Finnigan
  INET: oracle_list_at_peterfinnigan.demon.co.uk

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------

To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). Received on Mon Sep 29 2003 - 08:29:51 CDT