OraFAQ Forum: Security » Encryption in Oracle 9i Database

Home » RDBMS Server » Security » Encryption in Oracle 9i Database

Show: Today's Messages :: Polls :: Message Navigator
E-mail to friend

Encryption in Oracle 9i Database [message #220166]

Mon, 19 February 2007 05:26

herin
Messages: 7
Registered: February 2007
Location: India

Junior Member

Hello,

Since i am in process of database Audit, i need to check which type of Encryption is used (i.e DES,AES,TDES etc) in the Client's Oracle 9i Database Server. Could anyone please help me out to get how to check the ongoing Encryption in DB.

Thanks for Guidance

Appreciate your support

[Updated on: Mon, 19 February 2007 05:29]

Report message to a moderator

Re: Encryption in Oracle 9i Database [message #220192 is a reply to message #220166]

Mon, 19 February 2007 07:21

oskarsdba
Messages: 7
Registered: January 2007
Location: Latvia

Junior Member

Hi,
It's a Oracle Advanced security option (Enterprise edition).

1) To check what adapters installed on server:
example:
cd $ORACLE_HOME/bin
bash-2.05$ adapters
Installed Oracle Net transport protocols are:
IPC
BEQ
TCP/IP
SSL
RAW
Installed Oracle Net naming methods are:
Local Naming (tnsnames.ora)
Oracle Directory Naming
Oracle Host Naming
Oracle Names Server Naming
NIS Naming
Installed Oracle Advanced Security options are:
RC4 40-bit encryption
RC4 56-bit encryption
RC4 128-bit encryption
RC4 256-bit encryption
DES40 40-bit encryption
DES 56-bit encryption
3DES 112-bit encryption
3DES 168-bit encryption
AES 128-bit encryption
AES 192-bit encryption
AES 256-bit encryption
MD5 crypto-checksumming
SHA-1 crypto-checksumming

2) Then verify on client and server is encrypted network is configured, check both sqlnet.ora files:
example,
#SQLNET.ORA - CLIENT
sqlnet.crypto_seed="sdasdadegdldfdio"
sqlnet.encryption_client = required
sqlnet.encryption_types_client = (3DES_112)

#SQLNET.ORA - SERVER
sqlnet.crypto_seed="dasssssssrqwrddgdfyhtrr"
sqlnet.encryption_server = required
sqlnet.encryption_types_server = (3DES_112)

3) Take a trace, to be sure that it's working.

See also :
http://download-uk.oracle.com/docs/cd/B19306_01/network.102/b14268/toc.htm

Report message to a moderator

Re: Encryption in Oracle 9i Database [message #220263 is a reply to message #220166]

Mon, 19 February 2007 23:51

herin
Messages: 7
Registered: February 2007
Location: India

Junior Member

Hey Latvia

Thanks a lot for your guideance,,,, Really its helpfull...

Now refrerring to your idea and forwarding in the assignment

i got new module of Triple DES / TDES Encryption of User Passwords to replace old DES Encryption

Could u please guide me, how to initiate the assignment (Realtime Database with 12-15 user in it)

Appreciate your support g8ly

Thnks for the help

[Updated on: Mon, 19 February 2007 23:52]

Report message to a moderator

Previous Topic:	How can I allow a user to change their Oracle DB password?
Next Topic:	Give users the bare minimum privs

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

]

Current Time: Fri Apr 19 02:44:30 CDT 2024