Home > IT Answers > Oracle > Encryption in the Database
Dw49999
0 pts.
 Encryption in the Database
Oracle, OS/390, SQL Server, UDB for mainframe, z/OS
Has anyone encrypted data in their Oracle/DB2/SQLServer databases? Can you share you experiences?

Software/Hardware used:
ASKED: May 12, 2004  2:18 PM
UPDATED: May 13, 2004  12:51 AM
RELATED QUESTIONS
Answer Wiki:
Yes, in a ASP.Net application we encrypted CC info as the SQL server was located at a site we did not control. It was very straightforward to code (VB.net). We did not performance track it as we were only reading/writing one record at a time but I would think it would be minimal.
Last Wiki Answer Submitted:  May 12, 2004  2:31 pm  by  Pushaw   0 pts.
All Answer Wiki Contributors:  Pushaw   0 pts.
To see all answers submitted to the Answer Wiki: View Answer History.


RSS - Discussions Help
Discuss This Question:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

 

Oracle’s DBMS_OBFUSCATION_TOOLKIT is used to encrypt data in the database. I have two white papers on my web site (http://www.peasland.net) which talk about Encrypting Data In The Database and DBMS_OBFUSCATION_TOOLKIT Key Security. You might want to check them out.

Cheers,
Brian

Peasland
 0 pts.
 

In case of Oracle please use the Obfuscation kit that is available.

DBMS_OBFUSCATION_TOOLKIT allows an application to encrypt data using either the Data Encryption Standard (DES) or the Triple DES algorithms.

The Data Encryption Standard (DES), also known as the Data Encryption Algorithm (DEA) by the American National Standards Institute (ANSI) and DEA-1 by the International Standards Organization (ISO), has been a worldwide encryption standard for over 20 years. The banking industry has also adopted DES-based standards for transactions between private financial institutions, and between financial institutions and private individuals. DES will eventually be replaced by a new Advanced Encryption Standard (AES).

DES is a symmetric key cipher; that is, the same key is used to encrypt data as well as decrypt data. DES encrypts data in 64-bit blocks using a 56-bit key. The DES algorithm ignores 8 bits of the 64-bit key that is supplied; however, developers must supply a 64-bit key to the algorithm.

Triple DES (3DES) is a far stronger cipher than DES; the resulting ciphertext (encrypted data) is much harder to break using an exhaustive search: 2**112 or 2**168 attempts instead of 2**56 attempts. Triple DES is also not as vulnerable to certain types of cryptanalysis as is DES. DES procedures are as follows:

DESEncrypt Procedure
DESDecrypt Procedure

PRASAD55
 0 pts.