Re: Encrypting data witth TDE Oracle 10g

Hi all, very interesting talk ... no ?
Sorry for my poor english ...

I just want to demonstrate to my customer that encrypt data is not a real solution, but i want also explain to him that's possible. I just want to undestand how encrypt data work.

So, i'm ok with you with VPD, but if we want a more secure database, we must try to encrypt data. We must demonstrate that encrypt data is not possible because of poor perf.

So, have you a paper which explain how to encrypt column (and not just a string) with DBMS_CRYPTO. Should we use HASH with DBMS_CRYPT on each column.

How we do the link between user, key management, with DBMS_CRYPTO ? we want to use certificate , is it possible with Oracle ?

Fred

> Like Ed said: VPD is what you want - it does not encrypt, but enforces
> extensions to the where clause of every select you want.
> Effectively, this means user A can only see what you design user A to
> see.
> I still fail to see why you would like to encrypt your data. Realize
> there is a performance penalty in encrypting/decrypting.
> It's a CPU intensive process!
>
> --
> Regards,
> Frank van Bortel
>
> Top-posting is one way to shut me up...
Received on Thu Aug 24 2006 - 03:41:02 CDT