topic Re: encryption algorithm in Operating System - HP-UX

encryption algorithm

Scott Williams_5 — Fri, 13 Jun 2003 14:23:31 GMT

Hi all,

We have Hpux 11.0 with Oracle 8.1.7.

I'm looking for an encrypt/decrypt algorithm to encrypt credit card information stored in some of our Oracle tables. The idea is to be able access it programmatically (encrypting & decrypting), but sqlplus queries only show jibberish.

Anyone deal with a similar issue? If so, how was it resolved?

Thanks,

Scott Williams

Re: encryption algorithm

Umapathy S — Fri, 13 Jun 2003 14:28:52 GMT

Scott,
For encryption/decryption algorithms I can suggest using Rijndael algorithm. Check this out,
http://csrc.nist.gov/CryptoToolkit/aes/rijndael/

I am not understanding your last question. Normally its good to encrypt and hexify the results before storing it. Through hexification we get printable characters that can be stored in a db. Later use the same approach of dehexify and decrypt when you get the details.

HTH,
Umapathy

Re: encryption algorithm

Massimo Bianchi — Fri, 13 Jun 2003 14:42:50 GMT

Hi,
oracle has the functionality to send cripted traffic over the network.
You can used MD5 authentication for the purpouse of masquerading sqlnet output if without the proprer key.

Another security trick it to restric the sqlnet access using the sqlnet.ora files.

I will try to search some docs on metalink.

HTH,
Massimo

Re: encryption algorithm

Massimo Bianchi — Fri, 13 Jun 2003 14:45:55 GMT

Doc ID: Note:104410.1
Subject: How to Enable Encryption & Checksumming using JDBC Drivers
Type: BULLETIN
Status: PUBLISHED
Content Type: TEXT/PLAIN
Creation Date: 04-APR-2000
Last Revision Date: 02-MAY-2001

Overview ---------- This article describes how to enable encryption and checksumming using JDBC drivers.

Re: encryption algorithm

Darren Prior — Fri, 13 Jun 2003 14:47:20 GMT

Hi Scott,

perhaps something like PGP could be used? It has an ascii armouring option.

regards,

Darren.

Re: encryption algorithm

Massimo Bianchi — Fri, 13 Jun 2003 14:47:32 GMT

Doc ID: Note:151126.1
Subject: Oracle Advanced Security Release 8.1.7 README
Type: README
Status: PUBLISHED
Content Type: TEXT/PLAIN
Creation Date: 29-JUN-2001
Last Revision Date: 29-JUN-2001

Re: encryption algorithm

Elena Leontieva — Fri, 13 Jun 2003 14:48:14 GMT

Scott,

You may want to look at this overview:
http://www.cybcon.com/~jkstill/util/zips/Data_Obfuscation_and_Encryption.doc

Re: encryption algorithm

Caesar_3 — Fri, 13 Jun 2003 15:20:07 GMT

Hello!

Use the MD5 or the blowfish.

Caesar

Re: encryption algorithm

A. Clay Stephenson — Fri, 13 Jun 2003 15:53:25 GMT

Before you tackle this, you need to do some more design work:

1) How will you store the keys? - or will everyone use a common key?

2) What happens if the key is lost?

3) Do you really want encryption or could the sensitive data be stored in a very restricted table and joined to the main table as only as needed?

4) How do you plan to restrict access to the SQL procedures?

Re: encryption algorithm

Scott Williams_5 — Mon, 16 Jun 2003 19:47:16 GMT

Thank you all for your responses. A.Clay Stephenson has it right -- I've got some more design work to do. But you all have given me a good starting point. I appreciate your time.

I believe we'll end up doing a combination of things along these lines:
1. Store a translation of the data (obfuscate), rather than encrypt.
2. Restrict table access for SQL
3. Application data masking.

Thanks again!

Scott Williams

Re: encryption algorithm

Yogeeraj_1 — Tue, 17 Jun 2003 03:47:27 GMT

hi,

Clay is right!

I can understand why you are having problems doing it in Oracle itself.

Below a small example for you:
=========================================================================

yd@MYDB.MU> r
1 create or replace function crypt( p_str in varchar2 ) return raw
2 as
3 l_data varchar2(255);
4 begin
5 l_data := rpad( p_str, (trunc(length(p_str)/8)+1)*8, chr(0) );
6 return dbms_obfuscation_toolkit.DESEncrypt( input => utl_raw.cast_to_raw(l_data),key => utl_raw.cast_to_raw('MagicKey') );
7* end;

Function created.

Elapsed: 00:00:00.19

yd@MYDB.MU> r
1 create or replace function decrypt( p_str in raw ) return varchar2
2 as
3 begin
4 return utl_raw.cast_to_varchar2( dbms_obfuscation_toolkit.DESdecrypt( input => p_str,key=> utl_raw.cast_to_raw('MagicKey') ) );
5* end;

Function created.

Elapsed: 00:00:00.03
yd@MYDB.MU>

yd@MYDB.MU> column data format a10
yd@MYDB.MU> create table tabyd ( data varchar2(9), data_enc raw(16) );

Table created.

Elapsed: 00:00:00.02
yd@MYDB.MU> insert into tabyd values ( '012345678',crypt('012345678'));

1 row created.

Elapsed: 00:00:00.04
yd@MYDB.MU> commit;

Commit complete.

Elapsed: 00:00:00.01
yd@MYDB.MU> select data,data_enc,decrypt(data_enc) data from tabyd;

DATA DATA_ENC DATA
__________ ________________________________ __________
012345678 07CF8213EDC46C277C720164D915B70C 012345678

Elapsed: 00:00:00.01
yd@MYDB.MU>

==============================================================================================

Hope this helps!

regards
Yogeeraj

Re: encryption algorithm

Yogeeraj_1 — Tue, 17 Jun 2003 03:52:32 GMT

sorry for the garbled output. attached a more readable one.

regards
Yogeeraj

Re: encryption algorithm

Scott Williams_5 — Tue, 17 Jun 2003 13:08:34 GMT

Yogeeraj,

Your example was clear and understandable.
Very nice -- Thanks!

Scott