- Community Home
- >
- Servers and Operating Systems
- >
- Operating Systems
- >
- Operating System - HP-UX
- >
- Re: Time to decrypt an encrypted field
Categories
Company
Local Language
Forums
Discussions
Forums
- Data Protection and Retention
- Entry Storage Systems
- Legacy
- Midrange and Enterprise Storage
- Storage Networking
- HPE Nimble Storage
Discussions
Discussions
Discussions
Forums
Forums
Discussions
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
- BladeSystem Infrastructure and Application Solutions
- Appliance Servers
- Alpha Servers
- BackOffice Products
- Internet Products
- HPE 9000 and HPE e3000 Servers
- Networking
- Netservers
- Secure OS Software for Linux
- Server Management (Insight Manager 7)
- Windows Server 2003
- Operating System - Tru64 Unix
- ProLiant Deployment and Provisioning
- Linux-Based Community / Regional
- Microsoft System Center Integration
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Community
Resources
Forums
Blogs
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО04-27-2006 09:33 PM
тАО04-27-2006 09:33 PM
Time to decrypt an encrypted field
1. the time required to encrypt a field?
2. the time required to decrypt a field?
Thanks.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО04-27-2006 10:31 PM
тАО04-27-2006 10:31 PM
Re: Time to decrypt an encrypted field
I can't find any figures provided by Oracle.
But as the tables and indexes are encrypted, no real impact on the application level should be seen. See Metalink Doc. 317311.1
Somebody posted that it took 90 minutes to encrypt a table of 27 million rows, but does not state platform or machine spec.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО04-28-2006 12:42 AM
тАО04-28-2006 12:42 AM
Re: Time to decrypt an encrypted field
It depends on the columns size, encryption key length chosen, cpu speed, cpu family, memory speed, and perhaps most importantly the infrastructure chosen to make the encrypted fields transparant to legitimate end users. Will you store the encrypted column in the base table, or or use a view to join it in? Will you use triggers to encrypt the data?
There was an article in the Oracle Magazine a year ago which provided a good intro:
http://www.oracle.com/technology/oramag/oracle/05-jan/o15security.html
Google will find lots of other reading on the matter.
Noone will be able to answer the specific generic question.
Best you can do is to run your own simplified benchmark. As simple as possible... but no simpler to store at least a million values plain, and a million encrypted. Next retrieve that data a million time plain, and a million time thrhough the anticipate decryption steps... all of them. That is, if the encrypted data gets to live in its own table, then the extra join should be counted towards the price of the decryption in my opinion.
Now compare the wallclock and cpu time and optionally divide by a million.
The encryption of a single field here and there will not be measurable. But [en|de]crypting lots of columns for lots of concurrent users may bring an alread oveerly busy system to its knees. It depends... and only you know the circumstances wll enough to decided what matters, what not.
In the mean time you may choose to settle for a coars approximation lik e Peter offers, knowing your number could be up to a factor 10 better or worse (cpu speed alone could give 2x or 5x), but not a factor 100.
Hope this helps some,
Hein.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО04-28-2006 01:09 AM
тАО04-28-2006 01:09 AM
Re: Time to decrypt an encrypted field
But how can I refer Metalink Doc. 317311.1?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО04-28-2006 01:27 AM
тАО04-28-2006 01:27 AM
Re: Time to decrypt an encrypted field
if you are going to be responsible for Oracle task, I would recommend you register for an account at
https://metalink.oracle.com/
Once you have your account use the search for DOC-ID option.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО04-28-2006 03:25 PM
тАО04-28-2006 03:25 PM
Re: Time to decrypt an encrypted field
All I need to do is to select a group of records in the database (maximum around 30,000 records, with some of the columns encrypted). Then I need to decrypt such columns one-by-one for manipulations (I think it needs maximum 30,000 decryptions).
AES, 128-bit key will be used for encryption/decryption.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО04-28-2006 03:34 PM
тАО04-28-2006 03:34 PM
Re: Time to decrypt an encrypted field
If you don't mind, would you please share the document with me by dropping me an email?