||Oracle Tips by Burleson
Chapter 6 Oracle Encryption
0 – for double pass and 1 – for triple
The same as the explanation for IV in the
encryption routines, in RAW datatype. The default is a null
Table 6.4 Parameters for DES3Decrypt Function
The parameters are very similar to the ones
found in encryption routines. An example of the decryption routine
is provided at the beginning of the chapter.
The DESEncrypt and DESDecrypt code segments,
available both as functions and procedures and with overloaded
parameters using varchar2 and raw datatype, do the same thing as the
DES3 counterparts, only do it in one pass, using a 64-bit key.
Actually, the 8 bits of the 64 bits are thrown out and only 56 bits
are used. Since they use a low length key, they are more amenable to
breakage. In addition, the iv and iv_string parameters are not available in these stored codes.
As you have noticed earlier, the functions and
procedures have been overloaded with parameters both in RAW and
VARCHAR2. Which one should be used?
The use of varchar2
parameters makes it simpler to use; but may prove difficult to use
in some situations. From the example given at the beginning of the
chapter note that the encrypted data are in special characters which
The above text is
an excerpt from:
Oracle Privacy Security Auditing
Final Word on Oracle Security
This is the only authoritative
book on Oracle Security, Oracle Privacy, and Oracle Auditing written
by two of the world’s leading Oracle Security experts.
This indispensable book is only
and has an
immediate download of working security scripts: