best practices for encryption key managment??

From: Lane, Lawrence <Lawrence.Lane_at_echostar.com>
Date: Wed, 26 May 2004 11:07:14 -0600
Message-ID: <B8C9CF34B3F7164282C8610C93BB94AF016A83DC@riv-exchb1.echostar.com>

We are using the dbms_obfuscation toolkit to encrypt sensitive data per VISA's requirements.
Has anyone gone through the VISA audit before? They are not clear on their expectations for encryption...

I've found next to no info on key management - our plan is store the key in the database and also in pvcs with access limited to the dba team.

Any advice or experience to share would be appreciated...

Thanks,

Larry  

Larry Lane

Senior Database Administrator

EchoStar Satellite L.L.C

9601 South Meridian Blvd

Englewood, CO 80112

phone:(303) 723-2187

fax: (303) 723-2199

email: lawrence.lane_at_echostar.com  

---

Please see the official ORACLE-L FAQ: http://www.orafaq.com

---

To unsubscribe send email to: oracle-l-request_at_freelists.org put 'unsubscribe' in the subject line.
--

Archives are at http://www.freelists.org/archives/oracle-l/ FAQ is at http://www.freelists.org/help/fom-serve/cache/1.html

---

Received on Wed May 26 2004 - 12:04:25 CDT