Key generation using DBMS_CRYPTO

Hi,
I have a question about DBMS_CRYPTO pacakge , which can be used for encrypting sensitive data. When we use this package, is it a must that we have to supply the encryption key or is it that the package can itself generate the key? I read in the documentiation about RANDOMBYTES function (http://download.oracle.com/docs/cd/B14117_01/appdev.101/b10802/d_crypto.htm#1000530) but I don't know exactly how it can be used.
Basically my doubt is, when we use this package, we have to pass in the encryption key as a parameter and we have to know it or is there a way oracle can entirely take care of it?
Thanks

The way the DBMS_CRYPTO package works is with providing an encryption key to encrypt and to decrypt. I think personal looking at your question and the remarks you place you are looking for a solution like "Oracle Advanced Security", see http://www.oracle.com/us/products/database/options/advanced-security/index.html
Regards, Gerwin

Similar Messages

Primary key generation: Using CounterHome?

I can't find any documentation that talks about automatic primary key generation support on OC4J. I noticed the article on the Orion Support page that mentions their "Counter" bean. Is this the extent of support for automatic primary key generation in OC4J? When I searched for this class in the distribution, I only found it in a demo application in JDeveloper.
Is this something that is handled directly in the Oracle DB, which is why OC4J doesn't bother to support it?

Sorry I wasn't specific. By "going nowhere", I meant it went to an error page on the orion site. I don't know why it couldn't find it, because when I just now searched for the article with the title you just gave, the resulting URL was identical to what you gave me originally.
As to the "counter faq", I think I've seen that before, but I can't get to it right now (server overloaded or something). The one problem I remember with trying to pursue the "counter" solution was somewhat simple. I couldn't find the code. I didn't notice a download for the "Counter" class, and I can't find it in either the jdeveloper or oc4j distributions.
In any case, I ended up implementing the UUID solution, based on Floyd Marinescu's example in "EJB Design Patterns". I think this will work fine for our application.
I'd still like to know more about Orion's "Counter" solution, if there's any real code available to see.

Unable to succed with security key generation using keytool?

<h6>Hai ,
i am trying to generate a key for testing security in my application.
i have done by following way</h6>
C:\Program Files\Java\jdk1.5.0_10\bin>keytool -genkey -keystore test -alias aabc -keyalg RSA -storepass changeit
What is your first and last name?
[Unknown]: mahi
What is the name of your organizational unit?
[Unknown]: mahi
What is the name of your organization?
[Unknown]: mahi
What is the name of your City or Locality?
[Unknown]: chennai
What is the name of your State or Province?
[Unknown]: TN
What is the two-letter country code for this unit?
[Unknown]: IN
Is CN=mahi, OU=mahi, O=mahi, L=chennai, ST=TN, C=IN correct?
[no]: yes
Enter key password for <aabc>
(RETURN if same as keystore password): changeit
<h6>but when i restart my tomcat server it says the following error</h6>
java.io.IOException: Keystore was tampered with, or password was incorrect
     at sun.security.provider.JavaKeyStore.engineLoad(JavaKeyStore.java:768)
     at java.security.KeyStore.load(KeyStore.java:1150)
     at org.apache.tomcat.util.net.jsse.JSSESocketFactory.getStore(JSSESocketFactory.java:282)
     at org.apache.tomcat.util.net.jsse.JSSESocketFactory.getKeystore(JSSESocketFactory.java:222)
     at org.apache.tomcat.util.net.jsse.JSSE14SocketFactory.getKeyManagers(JSSE14SocketFactory.java:141)
     at org.apache.tomcat.util.net.jsse.JSSE14SocketFactory.init(JSSE14SocketFactory.java:109)
     at org.apache.tomcat.util.net.jsse.JSSESocketFactory.createSocket(JSSESocketFactory.java:88)
     at org.apache.tomcat.util.net.PoolTcpEndpoint.initEndpoint(PoolTcpEndpoint.java:292)
     at org.apache.coyote.http11.Http11BaseProtocol.init(Http11BaseProtocol.java:138)
     at org.apache.catalina.connector.Connector.initialize(Connector.java:1016)
     at org.apache.catalina.core.StandardService.initialize(StandardService.java:580)
     at org.apache.catalina.core.StandardServer.initialize(StandardServer.java:791)
     at org.apache.catalina.startup.Catalina.load(Catalina.java:503)
     at org.apache.catalina.startup.Catalina.load(Catalina.java:523)
     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
     at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     at java.lang.reflect.Method.invoke(Method.java:585)
     at org.apache.catalina.startup.Bootstrap.load(Bootstrap.java:266)
     at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:431)
Sep 29, 2007 2:41:32 PM org.apache.catalina.startup.Catalina load
SEVERE: Catalina.start
LifecycleException: Protocol handler initialization failed: java.io.IOException: Keystore was tampered with, or password was incorrect
     at org.apache.catalina.connector.Connector.initialize(Connector.java:1018)
     at org.apache.catalina.core.StandardService.initialize(StandardService.java:580)
     at org.apache.catalina.core.StandardServer.initialize(StandardServer.java:791)
     at org.apache.catalina.startup.Catalina.load(Catalina.java:503)
     at org.apache.catalina.startup.Catalina.load(Catalina.java:523)
     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
     at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     at java.lang.reflect.Method.invoke(Method.java:585)
     at org.apache.catalina.startup.Bootstrap.load(Bootstrap.java:266)
     at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:431)
<h6>what i am doing wrong? : ( </h6>

Try specifying RETURN instead of 'changeit' when asked the password for <aaaa>, and make sure that Tomcat knows the password of the keystore, however that's done - some configuration entry (don't ask me).

Primary key generation

How do use primary keys generated by database within entity bean?

DBMS primary key generation uses a set of deployment descriptors that
are specified at compile time to generate container code which is used
in conjunction with a supported database to provide key generation
support. Specify the name of the supported DBMS and the generator name,
if required by the database. Generated primary key support for Oracle
databases use Oracle's SEQUENCE. Once the SEQUENCE already exists in the
database, you specify automatic key generation in the XML deployment
descriptors. In the weblogic-cmp-rdbms-jar.xml file
<automatic-key-generation>
<generator-type>ORACLE</generator-type>
<generator_name>test_sequence</generator-name>
<key-cache-size>10</key-cache-size>
</automatic-key-generator>
You need to specify the name of the ORACLE SEQUENCE to be used in the
generator-name element. If the ORACLE SEQUENCE was created with an
INCREMENT value, then you must specify a key-cache-size. This value must
match the Oracle SEQUENCE INCREMENT value.
Owen wrote:
How do use primary keys generated by database within entity bean?

ADF BC Primary key generation with SQL Server DB

Hi,
I am using ADF 11.1.1.6 to develop a small application that will do some very basic CRUD operations on a SQL Server DB.
I read through http://www.oracle.com/technetwork/developer-tools/jdev/multidatabaseapp-085183.html before I'm starting to implement the Entity objects.
This document describes a way to do primary key generation using a table created in the DB and instructs to create an application connection to the Database :
+2. Create a Connection to the Table+
In your application, create a database connection named ROWIDAM_DB that points to the database containing your S_ROW_ID table. Alternatively, edit your BC project's properties and add the following Java option to the project's run configuration:
-Djbo.rowid_am_conn_name= appconnection
where appconnection is the name of a database connection that points to the S_ROW_ID table.
My question is how do we do this when we mve to a production environment ?
Also I'll be interested to hear if anyone has any pointers for developing ADF apps with SQL Server. (gotchas, performance pitfalls etc. )
-Jeevan
Upadte : This is SQL Server 2005
Edited by: Jeevan Joseph on May 2, 2012 9:04 AM

my apologies to everyone ... This should have been very simple. I just need to provide the config in my AM configuration(bc4j.xml)
jbo.rowid_am_conn_name* should be set to the connection name you create. For production deployments, theres a similar
jbo.rowid_am_datasource_name* that should work just fine (though I havent tried if it has any hiccups).
I'd like to point out one thing though, for whoever might stumble upon this thread and find it useful later on...
After I did the steps above, everything seemed to work when I tested the app from the AM tester. But when I built a UI for it in ADF Faces, I started getting an exception on Create/CreateInsert :
java.lang.ClassCastException: com.microsoft.sqlserver.jdbc.SQLServerConnection cannot be cast to oracle.jdbc.OracleConnection
     at oracle.jbo.server.OracleSQLBuilderImpl.setSessionTimeZone(OracleSQLBuilderImpl.java:5533)
     at oracle.jbo.server.DBTransactionImpl.refreshConnectionMetadata(DBTransactionImpl.java:5311)
     at oracle.jbo.server.DBTransactionImpl.initTransaction(DBTransactionImpl.java:1194)
     at oracle.jbo.server.DBTransactionImpl.initTxn(DBTransactionImpl.java:6826)
     at oracle.jbo.server.DBTransactionImpl2.connect(DBTransactionImpl2.java:136)
     at oracle.jbo.common.ampool.DefaultConnectionStrategy.connect(DefaultConnectionStrategy.java:213)The trouble is that the ADF Faces adf-config.xml overrides the AM configuration. Oracle is the default, and it overrides the SQL flavor I set when initializing the Model project.
This was not mentioned in the original document probably because ADF faces was out of scope for that document.
I also found this thread extremely useful, and its what reminded me of the ADF Faces AM config overrides : Re: Locking mode 'optupdate' with SQL92
Cheers !
Jeevan

Invoke wallet key for use with DBMS_CRYPTO package

Hello,
I intend to use DBMS_CRYPTO and use personal key that is already stored in a wallet (file). Which steps must i take to bring this key as a parameter to DBMS_CRYPTO.ENCRYPT for encypting BLOB. Al examples i found till now use only self created keys.
Many thanks to enyone who can help me with an advice.
Ernest

Sorry, but you're in the wrong forum (as this one is only for issues with the SQL Developer tool). You'll get more answers in the SQL And PL/SQL forum.
Have fun,
K.

Key Generation in console

Hi Folks,
I have defined key generation in console .I need some information in key generation such as ,if i define None ,range and Qualifed Range.
Where it effect and what are significance of it.
Secondaly., We create clone in Import manager and then we do mapping to remote key to the clone of the main table. I am looking for the business significance and techanical signifiance of it.
Thanks in advance,
Rohit

Hi Rohit,
If you choose
NONE: - Then remote key will not be generated automatically and has to be applied explicitly either using import manager or in data manager.
RANGE: - Here we can specify a range using TO and FROM. This generates the key automatically for that client between that range.
Qualified range: - Here we specify a range for a qualified table for key generation.
Keys are generated on a per value basis i.e. MDM automatically generates keys for the specified single-valued lookup field based on values you specify
using the Range property. You can specify Qualified Range values by selecting the
single-valued lookup field from the drop-down list and specifying From
and To values for each lookup table value.
Let me know if this helped your cause.
BR,
Siddharth

Key generation in Remote Systems.

Hi,
When we are creating a remote Sytem we have a filed called Key Generation , where we can specify the from , to Range.
Can any one provide me the business scenario where this key generation is used?
I have an idea about key mapping which is used to differentiate filed values which are different in connected remote systems.
regards,
Venki.

Hi Venki,
The key generation is a very useful concept.
For Key Generation = Range, From=100, To= 200:
You need to map the Remote key to MDM_Material field during syndication in which you want to maintain the value.
So the first time you syndicate data, 100 will be assigned to the MDM_Material field for the syndicated record.. so on..
It gets updated to your field only after syndication and you can see it on edit key mapping against the record.
For Key Generation with Qualified range:
You need to select the lookup table, based on whose values you want value to be maintained in MDM_Material.
And for each value in the lookup field, you can select the range.
Example: Assigning Material number based on Account Groups.
Hope it help.
Thanks,
Priti
Edited by: Priti Rani Patnaik on Apr 7, 2010 10:23 AM

Error when useing DBMS_CRYPTO package in reports 10g

hi all,
i wrote a package which use dbms_crypto, there are functions to crypto userid and decrypo userid.
in report 6i it work fine it cryptos and decrpts. when i use in reports 10g it gives this error.
-28817 ORA-28817: PL/SQL function returned an error.
ora-06512: at "SYS.DBMS_CRYPTO_FFI", line 67
ORA-06512: at "SYS.DBMS_CRYPTO", line 41
ora-06512: at "YBS.SIFRELE", line 26
the packege like this;
PACKAGE BODY SIFRELE
IS
function sicil_sifrele (p_sicil_no IN varchar2) RETURN varchar2
IS
p_key RAW(128);
p_sicil_raw RAW(128);
p_encrypted_raw RAW(128);
BEGIN
p_key := utl_raw.cast_to_raw(to_char(sysdate,'mmyyyydd'));
p_sicil_raw := utl_raw.cast_to_raw(p_sicil_no);
p_encrypted_raw := dbms_crypto.encrypt(src => p_sicil_raw,
typ => dbms_crypto.des_cbc_pkcs5, key => p_key);
return (utl_raw.cast_to_varchar2(p_encrypted_raw));
END;
FUNCTION sicil_coz ( p_encrypted_raw IN RAW) RETURN varchar2
IS
p_key RAW(128);
p_decrypted_raw RAW(128);
sicil_donen VARCHAR2(250);
BEGIN
p_key := utl_raw.cast_to_raw(to_char(sysdate,'mmyyyydd'));
p_decrypted_raw := dbms_crypto.decrypt(src => p_encrypted_raw,
typ => dbms_crypto.des_cbc_pkcs5, key => p_key);
sicil_donen := utl_raw.cast_to_varchar2(p_decrypted_raw);
return (sicil_donen);
END;
END;
thanks.
eser

Hello,
You should create a "wrapper function"
Create a function in the database that will call dbms_crypto.encrypt / dbms_crypto.decrypt and call this function in Reports.
(The problem here seems to be the reference to dbms_crypto.des_cbc_pkcs5)
Regards

Error when using DBMS_CRYPTO package in reports 10g

hi all,
i wrote a package which use dbms_crypto, there are functions to crypto userid and decrypo userid.
the packege like this;
PACKAGE BODY SIFRELE
IS
function sicil_sifrele (p_sicil_no IN varchar2) RETURN varchar2
IS
p_key RAW(128);
p_sicil_raw RAW(128);
p_encrypted_raw RAW(128);
BEGIN
p_key := utl_raw.cast_to_raw(to_char(sysdate,'mmyyyydd'));
p_sicil_raw := utl_raw.cast_to_raw(p_sicil_no);
p_encrypted_raw := dbms_crypto.encrypt(src => p_sicil_raw,
typ => dbms_crypto.des_cbc_pkcs5, key => p_key);
return (utl_raw.cast_to_varchar2(p_encrypted_raw));
END;
FUNCTION sicil_coz ( p_encrypted_raw IN RAW) RETURN varchar2
IS
p_key RAW(128);
p_decrypted_raw RAW(128);
sicil_donen VARCHAR2(250);
BEGIN
p_key := utl_raw.cast_to_raw(to_char(sysdate,'mmyyyydd'));
p_decrypted_raw := dbms_crypto.decrypt(src => p_encrypted_raw,
typ => dbms_crypto.des_cbc_pkcs5, key => p_key);
sicil_donen := utl_raw.cast_to_varchar2(p_decrypted_raw);
return (sicil_donen);
END;
END;
in report 6i it work fine cryptos and decrpts. when i use in reports 10g it gives this error.
-28817 ORA-28817: PL/SQL function returned an error.
ora-06512: at "SYS.DBMS_CRYPTO_FFI", line 67
ORA-06512: at "SYS.DBMS_CRYPTO", line 41
ora-06512: at "YBS.SIFRELE", line 26
thanks...

Hello,
You should create a "wrapper function"
Create a function in the database that will call dbms_crypto.encrypt / dbms_crypto.decrypt and call this function in Reports.
(The problem here seems to be the reference to dbms_crypto.des_cbc_pkcs5)
Regards

Can I encrypt a string with RSA encryption using DBMS_CRYPTO?

We have an web application that does a redirect thru a database package to a 3rd party site. They would like us to encrypt the querystring that is passed using RSA encryption. The example that they've given us (below) uses the RSA cryptographic service available in .NET. Is it possible to do this using DBMS_CRYPTO or some other method in Oracle?
Below are the steps outlined to use the key to generate the encrypted URL
2.1 Initialize Service
The RSA cryptographic service must be initialized with the provided public key. Below is sample code that can be used to initialize the service using the public key
C#
private void InitializeRSA( string keyFileName )
CspParameters cspParams = new CspParameters( );
cspParams.Flags = CspProviderFlags.UseMachineKeyStore;
m_sp = new RSACryptoServiceProvider( cspParams );
//Load the public key from the supplied XML file
StreamReader reader = new StreamReader( keyFileName );
string data = reader.ReadToEnd( );
//Initializes the public key
m_sp.FromXmlString( data );
2.2 Encryption method
Create a method that will encrypt a string using the cryptographic service that was initialized in step 2.1. The encryption method should convert the encryption method to Base64 to avoid special characters from being passed in the URL. Below is sample code that uses the method created in step 2.1 that can be used to encrypt a string.
C#
private string RSAEncrypt( string plainText )
ASCIIEncoding enc = new ASCIIEncoding( );
int numOfChars = enc.GetByteCount( plainText );
byte[ ] tempArray = enc.GetBytes( plainText );
byte[ ] result = m_sp.Encrypt( tempArray, false );
//Use Base64 encoding since the encrypted string will be used in an URL
return Convert.ToBase64String( result );
2.3 Generate URL
The query string must contain the necessary data elements configured for you school in Step 1. This will always include the Client Number and the Student ID of the student clicking on the link.
1.     Build the query string with Client Number and Student ID
C#
string queryString = “schoolId=1234&studentId=1234”;
The StudentCenter website will validate that the query string was generated within 3 minutes of the request being received on our server. A time stamp in UTC universal time (to prevent time zone inconsistencies) will need to be attached to the query string.
2.     Get the current UTC timestamp, and add the timestamp to the query string
C#
string dateTime = DateTime.UtcNow.ToString(“yyyy-MM-dd HH:mm:ss”);
queryString += “&currentDT=” + dateTime;
Now that the query string has all of the necessary parameters, use the RSAEncrypt (Step 2.2) method created early to encrypt the string. The encrypted string must also be url encoded to escape any special characters.
3.     Encrypt and Url Encode the query string
C#
string rsa = RSAEncrypt(querystring);
string eqs = Server.UrlEncode(rsa);
The encrypted query string is now appended to the Url (https://studentcenter.uhcsr.com), and is now ready for navigation.
4.     Build the URL
C#
string url = “https://studentcenter.uhcsr.com/custom.aspx?eqs=” + eqs

The documentation lists all the encyrption types:
http://download.oracle.com/docs/cd/B19306_01/appdev.102/b14258/d_crypto.htm#ARPLS664

Problem with automatic key generation

Hi,
I'm getting an exception when creating entity EJB's that use automatic primary key
generation (I'm using MS SQL Server as the db). The data is being inserted correctly
onto the database (including the auto generated key), but the auto generated primary
key field in the EJB is being set to zero rather than the correct value. This causes
a NoSuchEntityException.
The db table has an identity set on the auto generated field, but this field is not
the primary key.
Does anyone have an idea as to what the problem is?
thanks,
Andy

Make sure you are using a TX DataSource
"Andy Pearson" <[email protected]> wrote in message
news:3ccead40$[email protected]..
>
Hi,
I'm getting an exception when creating entity EJB's that use automaticprimary key
generation (I'm using MS SQL Server as the db). The data is being insertedcorrectly
onto the database (including the auto generated key), but the autogenerated primary
key field in the EJB is being set to zero rather than the correct value.This causes
a NoSuchEntityException.
The db table has an identity set on the auto generated field, but thisfield is not
the primary key.
Does anyone have an idea as to what the problem is?
thanks,
Andy

Problem changing default key bindings using Oracle Terminal

Hello,
I'm facing a problem changing default key bindings using Oracle Terminal. I changed
some bindings, saved them in forms60/fmrusw.res, started the generation and saved again.
I thought that's it but it wasn't. It took no effect at all in Forms (even after recompilation) although reopening the file in Terminal showed the changes. I'm using Forms in German, which means that even the key bindings displayed in Forms are translated i.e. STRG+F1 instead if CTRL+F1,
but I can't find a german version of this resource file, so i think it's the same resource file for all supported languages. But what is needed for the changes to take effect ?
Thanks in advance
STD
null

Hi,
is it client/server you are working?
if so you should not be using the fmrusw.res file because I guess your NLS_LANG is German_Germany.WE8ISO8859P1 or something like that. This means the terminal that is being opened is fmrdw.res instead of fmrusw.res and this file should be edited using Oracle Terminal.
if you are working via the web implementation than you can open the file fmrweb.res in a text editor and change the keybindings in there. If you need to have the PC like key bindings on the web just open the fmrpcweb.res and see if it contains the German texts. If so you can either copy this file over the frmweb.res file or you can specify term=fmrpcweb.res in the serverargs parameter.
Hope this helps.
Kind regards,
Frank van der Borden
Oracle Support Services
Netherlands

Data Quality Manager component Crashing during Batch Key Generation?

Hi All,
I have setup batch key generation for "FINS Members" buscomp and when the job is executed the task crashes always. I have observed the crash is not consistent on a particular data.
Most of the times we get FDR file generated and sometimes we have another file "hs_err_pid xxx.log" in the siebel server BIN directory.
When batch is executing one specific record it seems to be running out of memory.
Below is the detail from the crash log:-
Virtual memory info:
Total : 2097024 KB
Available : 1122452 KB
Available extendent: 0 KB
Few Crash Scenario 's:-
Crash Scenarios:
73 Contacts - DqMgr CRASH while processing the record "1-908F9". After removing the record from the system, batch job completed with no crash. The contact record has two address associated with this and the name details are below:
Last Name - ER11 PASS 3 LN
First Name - ER11 PASS 3 FN
Middle Name - ER11 PASS 3 MN
Two Address Associated
689 contacts DqMgr CRASH while processing the record "1-6KRHD". After removing the record from the system, batch job completed with no crash. The contact record has one address associated with this and the name details are below:
Last Name - UAT TESTING
First Name - SCENARIO 6 CLIENT
Middle Name - DO NOT USE
One Address Associated
Any help?
Thanks.

Hi
Thanks for using My Oracle Support Community.
You mention - "After removing the record from the system, batch job completed with no crash"
I would recommend you to check the record and if there are any differences between this record and the others for which the process gets completed.
Also, please raise a Service Request with Oracle Tech Support with all the relevant logs so that we can analyse the issue in detail and suggest you further recommendations.
Thanks,
Shwet

Urgent: automatic key generation and java.lang.Long

Hi,
I keep getting the following error:
In RDBMS CMP bean 'UserEntity', when Automatic Key Generation is enabled, the
Primary Key class must be java.lang.Integer.
I need to have Long as primary key, how do I solve it?
Thanks,
A.

Use WebLogic Server 8.1
java.lang.Long is supported in WLS 8.1
thanks,
Deepak
"iggy" <[email protected]> wrote:
>
Hi,
I keep getting the following error:
In RDBMS CMP bean 'UserEntity', when Automatic Key Generation is enabled,
the
Primary Key class must be java.lang.Integer.
I need to have Long as primary key, how do I solve it?
Thanks,
A.

Key generation using DBMS_CRYPTO

Similar Messages

Maybe you are looking for