Pete Finnigan's Oracle Security Forum


    
      
        Pete Finnigan's Oracle Security Forum
        (http://www.petefinnigan.com/forum/yabb/YaBB.cgi)
      

        Oracle Security >> Oracle Security >> Transparent Data Encryption
        
(Message started by: Pete Finnigan on May 7^th, 2006, 2:40pm)

Title: Transparent Data Encryption
Post by Pete Finnigan on May 7^th, 2006, 2:40pm

Oracle 10g Release 2 has a new tool is Transparent Data Encryption.
One of the important features is allow you to encrypt Index column that minimize the performance reduction.
http://www.eweek.com/article2/0,1895,1837854,00.asp

I don't know they encryp the data before index or encryp the indexed data
Can you explain to me or show me some thing?
Thank you
Edit/Delete Message

Title: Re: Transparent Data Encryption
Post by Pete Finnigan on May 7^th, 2006, 10:30pm

Hi,

Sorry I moved your post to here as your question is about a database add-on feature rather than a tool.

Let me try and answer your question. TDE encrypts data at the file level. Any read or write of the data involves a "transparant" encrypt/decrypt before the user gets the data or before it goes back to disc. This feature is very useful for protecting the "data at rest", i.e. when its in the data files or when written to a backup tape. It is not useful for encrypting data within the database. Because of the way that it works its possible to encrpt index columns as the encrypt/decrypt occurs at the hardware abstraction layer so as far as the Oracle kernel is concerned its clear text data.

hth

cheers

Pete

Title: Re: Transparent Data Encryption
Post by Pete Finnigan on May 9^th, 2006, 6:33pm

Thank you, Peter.
So, I understand that the Data is encrypted before it is indexed. For this reason, we can
- Create an index on an encrypted column only when NO SALT is specified.
- Index range scans are supported for equality searches only.
I hope I understand this right.

Title: Re: Transparent Data Encryption
Post by Pete Finnigan on Jul 3^rd, 2006, 5:04am

hi..
i'm a new comer in this forum.
i interested about trasparent data encryption,
but i don't know how tde works.
would you mind giving me references about tde?
thanks before