Re: obfuscate an integer and store in a number column

From: Pedro Lopes <pedro.lopes_at_netvisao.pt>
Date: Thu, 10 Feb 2005 21:35:00 +0000
Message-ID: <newscache$h3tpbi$g12$1@newsfront4.netvisao.pt>

Hi,
the security requirement is to have the price column which is a number(22) encrypted. I can not change the column datatype because this is to use under oracle ebusiness suite and I think that it's better not to change the column datatype. Maybe I'll try to look at the possibility of having another table to store the encrypted value. But since probably this will be used on more tables I don't know if this will be manageable.

thanks,
pedro

DA Morgan wrote:

> Pedro Lopes wrote:
> 

>> Hi all,
>> I have to encrypt some numeric data (the column is a number(22)).
>> After looking at dbms_obfuscation_toolkit (database is 9.2.0.5) I
>> realised that the output will be
>> alfanumeric (hex) and that I couldn't fit the encrypted value in the
>> number column.
>>
>> Does anyone have an idea on how can I achieve this ?
>>
>> I tried with some conversions like....
>> convert the number to hexadecimal,
>> hexadecimal to RAW,
>> encrypt,
>> convert RAW to hexadecimal,
>> convert Hex to number
>>
>> but I ended with a 38 digit number...that doesn't fit on the column.
>>
>> I cannot change the type of the column to varchar since this is an
>> oracle ebusiness suite application.
>>
>> thanks,
>> Pedro

> 
> 
> What is the actual security requirement?
> 
> One possibility:
> Change the data type.
> Store the encrypted version in the column
> Store the number in a function based index?

Received on Thu Feb 10 2005 - 15:35:00 CST