About Generating and Storing Encryption Keys
The DBMS_CRYPTO package can generate random material for encryption keys, but it does not provide a mechanism for maintaining them. Application developers must take care to ensure that the encryption keys used with this package are securely generated and stored. Also note that the encryption and decryption operations performed by DBMS_CRYPTO occur on the server, not on the client. Consequently, if the key is sent over the connection between the client and the server, the connection must be protected by using network encryption. Otherwise, the key is vulnerable to capture over the wire.
Although DBMS_CRYPTO cannot generate keys on its own, it does provide tools you can use to aid in key generation. For example, you can use the RANDOMBYTES function to generate random material for keys. (Calls to the RANDOMBYTES function behave like calls to the DESGETKEY and DES3GETKEY functions of the DBMS_OBFUSCATION_TOOLKIT package.)
Thanks for your response.
Muqthar
Oracle9i Certified DBA
-- --Original Message-- --
From: Ruth Gramolini [mailto:rgramolini@(protected)]
Sent: Wednesday, January 05, 2005 9:04 AM
To: jkstill@(protected); mwf@(protected)
Cc: ineyman@(protected); Muqthar.Ahmed@(protected); oracle-l@(protected)
Subject: RE: Generate RANDOM number
Even if it doesn 't fit his needs, it is imensely cool. RBG
-- --Original Message-- --
From: oracle-l-bounce@(protected)
[mailto:oracle-l-bounce@(protected)]On Behalf Of Jared Still
Sent: Tuesday, January 04, 2005 5:21 PM
To: mwf@(protected)
Cc: ineyman@(protected); Muqthar.Ahmed@(protected);
oracle-l@(protected)
Subject: Re: Generate RANDOM number
On Tue, 4 Jan 2005 17:12:37 -0500, Mark W. Farnham <mwf@(protected) > wrote:
> You asked what is wrong with his select.
>
> Probably he is seeking information regarding the quality of the pseudo
> random sequence that is generated.
--
Jared Still
Certifiable Oracle DBA and Part Time Perl Evangelist
--
http://www.freelists.org/webpage/oracle-l
* * * * * * * * *
The information contained in this E-mail message is privileged, confidential, and may be protected from disclosure; please be aware that any other use, printing, copying, disclosure or dissemination
of this communication may be subject to legal restriction or sanction. If you think that you have received this E-mail message in error, please reply to the sender and delete it from your computer. T
hank you.
--
http://www.freelists.org/webpage/oracle-l
