Encryption in oracle
i create a program in my database and
i want that no one see it source code
even DBA and my BOSS
how i can do this
kuljeet pal singh
You can use the PL/SQL wrap utility to encrypt source code http://download-west.oracle.com/docs/cd/B10501_01/appdev.920/a96624/c_wrap.htm#LNPLS016. Make sure that you keep the actual PL/SQL source in some sort of version control system if you do this-- otherwise no one (not even you) will be able to get the original source code back.
I would be curious, though, why you would want to prevent people like your boss from seeing your source code. I can understand not wanting customers who are being shipped applications to see the source, but I'm hard pressed to come up with a situation where I would have an ethical reason to prevent my boss from seeing the source.
Justin
Distributed Database Consulting, Inc.
http://www.ddbcinc.com/askDDBC
Similar Messages
-
What are the third party tools available for Encryption in Oracle database?
Dear All,
Can you please help me with the below question?
What are the third party tools available for Encryption in Oracle database? Please let me know if you know their feedback and also licensing/cost informationWhy would you spend money to purchase a third-party tool that will be, almost by definition, less secure than the tools inside the product you already own and paid for?
http://www.morganslibrary.org/reference/pkgs/dbms_crypto.html
But were I to have any to recommend one I would not do so without knowing information you seem to consider unimportant such as:
1. Operating system
2. Database edition and version
3. What type of data needs to be secured
4. What level of security is required -
Data encryption in oracle 8i and 9i
Hi,
I would like to know how data encryption in Oracle 9i
differes from that of Oracle 9i database.
Thanks in advance
ShintoWhat is your national character set? What is NLS_LENGTH_SEMANTICS set to?
Justin
Distributed Database Consulting, Inc.
http://www.ddbcinc.com/askDDBC -
How to disable encryption in oracle forms
Hi,
Is there any parameter or profile option need to be changed to disable encryption in oracle forms?
My requirement is to print all the parameters comes to ListenerServlet.java ,I'm able to do that but in the console i'm getting junk values because of encryption.
Thanks in advanceInsufficient information. Start with Forms version and description of what you are trying to do in greater detail.
The URL is encoded. So what exactly is this junk? Are you seeing encoded things like %20, %7C, etc . along with your actual values? Or, is it completely garbled with unreadable characters? Post a bit of that is you can in a pair of {code} tags like this.{code}<your stuff>{code}.
Regards, -
Is it possible to perform network data encryption between Oracle 11g databases without the advance security option?
We are not licensed for the Oracle Advanced Security Option and I have been tasked to use Oracle Network Data Encryption in order to encryption network traffic between Oracle instances that reside on remote servers. From what I have read and my prior understanding this is not possible without ASO. Can someone confirm or disprove my research, thanks.Hi, Srini Chavali-Oracle
As for http://www.oracle.com/technetwork/database/options/advanced-security/advanced-security-ds-12c-1898873.pdf?ssSourceSiteId… ASO is mentioned as TDE and Redacting Sensitive Data to Display. Network encryption is excluded.
As for Network Encryption - Oracle FAQ (of course this is not Oracle official) "Since June 2013, Net Encryption is now licensed with Oracle Enterprise Edition and doesn't require Oracle Advanced Security Option." Could you clarify this? Thanks. -
Find out which column is encrypted in oracle 9i
Hi,
I would like to know that which table/column is encrypted in oracle 9i?
Is it any Data dictionary view or any other query?
Appreciate your help!
thanks,If your application is storing encrypted data in Oracle, the Oracle data dictionary will have no idea that the data is encrypted. Assuming you're storing encrypted data in RAW/ BLOB columns rather than risking storing it in VARCHAR2 columns, you could query the data dictionary for columns whose data type is RAW or BLOB, but that's a rather imprecise metric. There might well be non-encrypted columns that are storing binary data in RAW or BLOB columns.
In 10g and later, if you are using transparent data encryption (TDE), you will see entries in the DBA_ENCRYPTED_COLUMNS view which will tell you which columns Oracle is encrypting. But, again, since Oracle has no idea whether the data Java is sending is encrypted or unencrypted, if your application is doing the encryption, these tables won't reflect that fact.
Justin -
Can anyone tell me if Encryption is included in the Oracle 10g Enterprise license? Or would this be a separate license charge/fee for encryption be required?
<p><b>This</b> should answer your questions regarding licensing.</p>
Tom -
Connection/Network encryption in Oracle Standard Edition 11gR2
Does the Oracle 11gR2 Standard Edition support any network encryption for SQL*Plus or JDBC thin clients? I don't have "Oracle Advanced Security" installed, is this required to support any encryption of data send across a network?
IA Guy wrote:
EdStevens wrote:
IA Guy wrote:
None which reference FIPS 140-2.
http://docs.oracle.com/cd/B28359_01/network.111/b28530/asoappe.htm
The cryptographic libraries for SSL included in Oracle Database 10g are designed to meet FIPS 140-2 Level 2 certification. Oracle Advanced Security makes use of these cryptographic libraries for SSL authentication. Please verify the current status of the certification at the Cryptographic Modules Validation Program Web site address:
That is the first statement which leads me to believe the manual hasn't been updated for 11G. Please confirm.
I am not an Oracle employee and so can neither confirm nor deny any statement they make. I'd suggest this is something you probably should be discussing directly with someone in authority at Oracle. Perhaps start with a sev4 (information request) SR.
Edited by: IA Guy on Dec 28, 2012 11:42 AM -
Nyone who had success using sign-encrypt policy(oracle web service manager)
Hi All,
I could not succeed in using sign Message and Encrypt and decrypt and verify signature policy using oracle web services manager.So I would be grateful if somebody who had success in using it would shed light on its use.
Basically,I am using the following policy steps in securing a helloworld web service using gateway(oracle web services manager) :
1)for Request (Decrypt and Verify signature).
2)for Response(Sign Message and Encrypt).
The configuration for Request is shown below:
Pipeline "Request"
Pipeline Steps:
Start Pipeline
Log
Decrypt and Verify Signature
Basic Properties Type Default Value
Enabled (*) boolean true true
XML Decryption Properties Type Default Value
Decryptor''s keystore location (*) string C:\Sun\jwsdp-2.0\xws-security\etc\server-keystore.jks
Decrypt Keystore Type (*) string jks jks
Decryptor''s keystore password string *******
Decryptor''s private-key alias (*) string s1as
Decryptor''s private-key password string *******
Enforce Encryption (*) boolean true true
XML Signature Verification Properties Type Default Value
Verifying Keystore location (*) string C:\Sun\jwsdp-2.0\xws-security\etc\server-truststore.jks
Verifying Keystore type (*) string jks jks
Verifying Keystore password string *******
Signer''s public-key alias (*) string xws-security-client
Enforce Signing (*) boolean true true
End Pipeline
And the configuration for Response is shown below:
Pipeline "Response"
Pipeline Steps:
Start Pipeline
Log
Sign Message and Encrypt
Basic Properties Type Default Value
Enabled (*) boolean true true
Signing Properties Type Default Value
Signing Keystore location (*) string C:\Sun\jwsdp-2.0\xws-security\etc\server-keystore.jks
Signing Keystore Type (*) string jks jks
Signing Keystore password string *******
Signer''s private-key alias (*) string s1as
Signer''s private-key password string *******
Signed Content (*) string BODY BODY
Sign XPATH Expression string
Sign XML Namespace string[]
Encryption Properties Type Default Value
Encryption Keystore location (*) string C:\Sun\jwsdp-2.0\xws-security\etc\server-truststore.jks
Encrypt Keystore Type (*) string jks jks
Encryption Keystore password string *******
Decryptor''s public-key alias (*) string xws-security-client
Encrypted Content (*) string BODY BODY
Encrypt XPATH Expression string
Encrypt XML Namespace string[]
End Pipeline
But I am getting the following fault exception while accessing this secure web service :
<SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/">
<SOAP-ENV:Body>
<SOAP-ENV:Fault>
<faultcode "http://schemas.oblix.com/ws/2003/08/Faults">c</faultcode>
<faultstring>Step execution failed with an exception
</faultstring>
<detail></detail>
</SOAP-ENV:Fault>
</SOAP-ENV:Body>
</SOAP-ENV:Envelope>
I would appreciate your help.Thanks.
KashHi clemens,
Actually I installed OracleWebServices_Manager_4_0_3 and I see my installation directory does not contain any of the directory structure you mention.
It installed oracle web services manager in the following location:
C:\coresv_install_home
and it contains the following subdirectories:
1)bin
2)config
3)db
4)ears
5)external
6)extlicences
7)lib
8)samples
9)scripts
10)wars
So I like to ask did you install the same version of the oracle web services manager, if not which version you install in which security is working for you.Thanks for any help.
Kash -
Regarding encryption on oracle 9i
Hi,
I am unable to encrypt the value from the below block.
DECLARE
input_string VARCHAR2(100) := 'date=' || to_char(sysdate,'YYYYMMDD') ||'&'||'userid=' ||'ppacobqi^^^^ldbs`lrm';
raw_input RAW(128) := UTL_RAW.CAST_TO_RAW(input_string);
key_string VARCHAR2(100) := '8uNDf!sVC';
raw_key RAW(128) := UTL_RAW.CAST_TO_RAW(key_string);
encrypted_raw RAW(2048);
encrypted_string VARCHAR2(2048);
BEGIN
dbms_obfuscation_toolkit.DESEncrypt(input => raw_input,
key => raw_key, encrypted_data => encrypted_raw );
dbms_output.put_line('> encrypted hex value : ' || rawtohex(encrypted_raw));
END;
am getting the below error.can anybody please help me out
ORA-28232: invalid input length for obfuscation toolkit
thanks in advanceHi,
See: http://asktom.oracle.com/pls/asktom/f?p=100:11:0::::P11_QUESTION_ID:791026226790#5982134701147
and/or:http://asktom.oracle.com/pls/ask/search?p_string=ORA28232+ -
Oracle user'd encrypted password (Oracle 10g)
Hi Guys,
Which table can I check for oracle user's encrypted password. I need to use the same password on the application's configuration file for connection to the database.
Thank you.SQL> desc user$
Name Null? Type
USER# NOT NULL NUMBER
NAME NOT NULL VARCHAR2(30)
TYPE# NOT NULL NUMBER
PASSWORD VARCHAR2(30)
DATATS# NOT NULL NUMBER
TEMPTS# NOT NULL NUMBER
CTIME NOT NULL DATE
PTIME DATE
EXPTIME DATE
LTIME DATE
RESOURCE$ NOT NULL NUMBER
AUDIT$ VARCHAR2(38)
DEFROLE NOT NULL NUMBER
DEFGRP# NUMBER
DEFGRP_SEQ# NUMBER
ASTATUS NOT NULL NUMBER
LCOUNT NOT NULL NUMBER
DEFSCHCLASS VARCHAR2(30)
EXT_USERNAME VARCHAR2(4000)
SPARE1 NUMBER
SPARE2 NUMBER
SPARE3 NUMBER
SPARE4 VARCHAR2(1000)
SPARE5 VARCHAR2(1000)
SPARE6 DATE -
Encryption password oracle 10g R2
Hi !!
I'm a newbie in oracle..
I want to encrypt password in a log table
how can I do that?
ORA-28365: wallet is not open
how can open this wallet?
thanks...
please help me
Edited by: user12170257 on May 24, 2010 10:24 PM
Edited by: user12170257 on May 24, 2010 10:30 PMHi,
Oracle Database 10g encrypts Columns using a master key, which is stored in a secure location called a wallet, which can be a file on the database server. Encrypted table keys are placed in the data dictionary. When a user enters data into the column defined as encrypted, Oracle Database 10g gets the master key from the wallet, decrypts the encryption key for that table from the data dictionary, uses that encryption key on the input value, and stores the encrypted data in the database
alter table accounts modify (ssn encrypt using 'AES128');
You can use AES128, AES192, AES256, or 3DES168 (168-bit Triple DES algorithm) as clauses. The values are self-explanatory; for instance, AES256 is for Advanced Encryption Standard algorithm with 256-bit key.
For More details -
http://www.oracle.com/technology/oramag/oracle/05-sep/o55security.html
Hope this thing works for you.
Regards,
Tiger.. -
ENCRYPTION in Oracle Applications 11
In Oracle applications 11.0.3, how is the security of data transferred between the client browser and the server maintained? Would tapping compromise the integrity of the data or is there any SSL or the like implemented?
Thanks.
nullyou better to check the codes first, it looks like the code first check the OS, then call the related code to export.
-
Goldengate 11.1.1.1 Oracle 11.2 Encrypted tablespace
Please advise why this error is showing and help us on this situation
Line: -----
Windows 2008 x64
Oracle 11.2.0.1 x64
Oracle Goldengate 11.1.1.1 x64
++++++++++++SOURCE++++++++++++++
sql>conn / as sysdba
**************CREATE TABLESPACE AND TABLE********************
CREATE TABLESPACE encrypted_ts
DATAFILE 'd:\oradata\test\encrypted_ts01.dbf' SIZE 128K
SIZE 15M
AUTOEXTEND ON NEXT 20M
MAXSIZE UNLIMITED
LOGGING
ENCRYPTION USING 'AES192'
EXTENT MANAGEMENT LOCAL
SEGMENT SPACE MANAGEMENT AUTO
DEFAULT NOCOMPRESS STORAGE(ENCRYPT);
CREATE TABLE TESTA
ID NUMBER,
NAME VARCHAR2(16 CHAR)
LOGGING
NOCOMPRESS
NOCACHE
NOPARALLEL
MONITORING;
cmd> mkstore -wrl d:\test\wallet -createEntry ORACLE.SECURITY.CL.ENCRYPTION.ORACLEGG
Enter <secret> : test
cmd>mkstore -wrl d:\test\wallet -viewEntry ORACLE.SECURITY.CL.ENCRYPTION.ORACLEGG
ORACLE.SECURITY.CL.ENCRYPTION.ORACLEGG = test
sql>ALTER SYSTEM SET ENCRYPTION WALLET CLOSE IDENTIFIED BY 'welcome1';
sql>ALTER SYSTEM SET ENCRYPTION WALLET OPEN IDENTIFIED BY 'welcome1';
Compile dbms_internal_clkm package.
sql>@prvtclkm.plb
sql>GRANT EXECUTE ON SYS.DBMS_INTERNAL_CLKM TO GGS_OWNER;
**********************************GOLDENGATE******************************************
ggsci>dblogin userid ggs_owner, ggs_owner
ggsci>add extract ext2ts, tranlog, begin now
ggsci>add rmttrail D:\ggs\dirdat\ts, extract ext2ts
ggsci>ENCRYPT PASSWORD test ENCRYPTKEY DEFAULT
Using default key...
Encrypted password: AACAAAAAAAAAAAEAZAMEFCPGPEOHYDHE
ggsci>edit params ext2ts
EXTRACT ext2ts
USERID ggs_owner, PASSWORD ggs_owner
RMTHOST 192.168.0.2, MGRPORT 7809
RMTTRAIL D:\ggs\dirdat\ts
DBOPTIONS DECRYPTPASSWORD AACAAAAAAAAAAAEAZAMEFCPGPEOHYDHE ENCRYPTKEY DEFAULT -- ???
TABLE TESTA;
+++++++++++++TARGET++++++++++++++++
sql> conn / as sysdba
**************CREATE TABLESPACE AND TABLE********************
cmd>
CREATE TABLESPACE ts
LOGGING DATAFILE 'd:\oradata\test\ts.dbf'
SIZE 15M
AUTOEXTEND ON NEXT 20M
EXTENT MANAGEMENT
LOCAL SEGMENT SPACE
MANAGEMENT AUTO;
CREATE TABLE TESTA
ID NUMBER,
NAME VARCHAR2(16 CHAR)
LOGGING
NOCOMPRESS
NOCACHE
NOPARALLEL
MONITORING;
************************************GOLDENGATE*****************************************
ggsci>DBLOGIN USERID ggs_owner, PASSWORD ggs_owner
ggsci>ADD CHECKPOINTTABLE GGS_OWNER.CHKPTAB
ggsci>ADD REPLICAT rep1, EXTTRAIL D:\ggs\dirdat\ts, CHECKPOINTTABLE GGS_OWNER.CHKPTAB
ggsci>EDIT PARAMS rep1
REPLICAT rep1
ASSUMETARGETDEFS
USERID ggs_owner, PASSWORD ggs_owner
MAP GGS_OWNER.TESTA, TARGET GGS_OWNER.TESTA;
+++++++++++++TARGET+++++++++++++++
ggsci>start replicat rep1
+++++++++++++SOURCE+++++++++++++++
ggsci>start extract ext2ts
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!EXTRACT - REPORT!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
2011-07-05 11:46:50 ERROR OGG-01028 ORA-06521: PL/SQL: Error mapping function
ORA-06512: at "SYS.DBMS_INTERNAL_CLKM", line 3
ORA-06512: at line 1.
2011-07-05 11:46:50 ERROR OGG-01668 PROCESS ABENDING.
Edited by: Oyunbold on Jul 7, 2011 3:25 AM
Edited by: Oyunbold on Jul 19, 2011 6:09 PMYesterday, I met the same problem. How do you solve it ? Plz, help me.
OS : AIX 5.3
DB : Oracle 11.1.0.7
OGG : 11.1.1.1
2011-09-06 15:26:56 INFO OGG-01515 Oracle GoldenGate Capture for Oracle, eora01.prm: Positioning to begin time Sep 2, 2011 6:50:49 PM.
2011-09-06 15:26:56 ERROR OGG-01028 Oracle GoldenGate Capture for Oracle, eora01.prm: ORA-12427: invalid input value for FLAGS parameter ORA-06512: at "SYS.DBMS_INTERNAL_CLKM", line 3 ORA-06512: at line 1.
2011-09-06 15:26:56 ERROR OGG-01668 Oracle GoldenGate Capture for Oracle, eora01.prm: PROCESS ABENDING.
Our Extract configuration is below :
EXTRACT EORA01
USERID ogg, PASSWORD AACAAAAAAAAAAADAHBMDHBECUCZBPIYE, encryptkey XKEY
DBOPTIONS DECRYPTPASSWORD AACAAAAAAAAAAAIARIXFKCQBMFIGFARA ENCRYPTKEY DEFAULT
ENCRYPTTRAIL
exttrail ./dirdat/ea
EOFDELAYCSECS 50
FLUSHCSECS 50
DISCARDFILE ./dirrpt/EORA01.DSC, APPEND, MEGABYTES 500
DISCARDROLLOVER AT 07:30
TABLE TVANBT.TLF_BUYS_MISS;
... -
Connect Coldusion to Oracle when encryption connection is enabled
We have had ColdFusion 8.0.1 connected to Oracle (11g r2) with no problem until we encrypted the Oracle connections. All our software tools had no problem still connecting except Coldfusion. Supposedly encryption changes should only have been server based but is ColdFusion an exception? Do if we need to add a Connection String parameter into ColdFusion Data Source Definition? If Yes, what is it? Or is there another solution?
Thanks893730 wrote:
We have had ColdFusion 8.0.1 connected to Oracle (11g r2) with no problem until we encrypted the Oracle connections. How are you encrypting the connections? Are you using the Oracle Advanced Security option to do network encryption? Or are you encrypting the connections at a lower level in the network.
All our software tools had no problem still connecting except Coldfusion. What is the error you get in ColdFusion?
Supposedly encryption changes should only have been server based but is ColdFusion an exception? Do if we need to add a Connection String parameter into ColdFusion Data Source Definition? If Yes, what is it? Or is there another solution?Does ColdFusion use OCI to connect to the database? Or does it use JDBC? Or something else?
Justin
Maybe you are looking for
-
Update oracle table using data through ODBC
Hi, I want to update tables inside an Oracle 8i database. The updates depend on data in a mySql database that I want to approach using an ODBC connection. I cannot figure out what I need to do to select data from an ODBC source from an oracle session
-
Scanning lots of photos - ideas?
I'm looking to scan a ton of old family photos. One scanner, the Kodak i1210, got a great write-up in the WSJ in early January. Here is a Consumer Reports blog post on it (I don't think he's right about it not being available to consumers): http://bl
-
Skinned scrollbar thumb does not reach the bottom of the track
I have an application in Flex 4.1 where there is a vertical List, bound to an array. As long as the List scrollbar is not skinned, everything is ok, the thumb oscillates from top to bottom of the track. But after adding a skin it works bad. The thumb
-
pleas_ Q1: how can run this code with use (javac.exe) class First { First(){ public static void main (String[] argv){ System.out.println("hello world "); Q2:how can i do build the first applet with use (appletviewer.exe)
-
Hi, what is the easiest (and fastest) way to create sequence of Numbers of length 1000 filled up by 1 example: [1,1,1,1,1,1,1,1...] or [2,2,2,2,2,2,2,2,2...] or [0,0,0,0,0,0,0,0,0...] etc... Thanks in advance Oldrich