Column value encryption in oracle 9i

[shyamakanta]

Hello All,

I have some customer related tables in my application.
I would like to encrypt the data for some of the columns like Telephone number,PAN number etc.

Is there anything other than the DBMS_OBFUSCATION_TOOLKIT .

Also I need how exactly it is used with the application.

Thanks.
Shyamakanta.

[Peter Godron]

Hi,
Oracle 10g also provides database level encryption with 'Transparent Data Encryption'.
http://www.oracle.com/technology/oramag/oracle/05-sep/o55security.html

What's wrong with the toolkit approach?

[Indira Aramandla]

Hi Shymakanta,

Oracle allows data to be encrypted and decrypted using the built in package
DBMS_OBFUSCATION_TOOLKIT. Since Oracle 8i release RDMS provides the ability to encrypt data stored in the database.

Encryption at the column level such as encrypting chemical formulas, credit card numbers, passwords or whatever data is sensitive to your business.

Until then only Protegrity's 3rd party product Secure.data had this capability. Oracle is now the only database vendor that provides this feature directly in the database on all platforms. Protegrity supports only NT, HP-UX, Sun Solaris and AIX.

Or in your application do not display those column data on the screen. Have application profiles, assigned to users and have have restricted access to the application screens allowing only authorised users to view the data.

As the previous post says in 10g there is Transparent Data Encryption (TDE).

TDE - Encryption on tables column is a new feature of 10g R2

Indira A