December 11, 2008 by oraclue
Security is a big topic these days so it’s time to play with new Oracle 11g features.
Apperently encrypted tablespaces has few advantages over TDE ( table level encryption ) .Could not find detail info how all works but got this from google:
“Transparent encryption/decryption takes place during disk input/output
(I/O) and not for every logical access to the data. This leads to improved
performance.”
The encrypted data is protected during operations like JOIN and SORT. This
means that the data is safe when it is moved to temporary tablespaces. Data
in undo and redo logs is also protected.
and decided to play some demo:
First you need hex convertor:
Make lifes easier.Here is one:
http://www.paulschou.com/tools/xlate/
and more info about dissasembling redo log.
http://www.orafaq.com/papers/redolog.pdf
Old, but good paper written by Graham Thornton .
Now my demo:
SQL> create table secret (username varchar2(20),password varchar2(20)) tablespace users ;
Table created.
SQL> insert into secret values (‘MYSELF’,'SECUREPASSWORD’);
1 row created.
SQL> commit;
Commit complete.
SQL> select * from secret;
USERNAME PASSWORD
——————– ——————–
MYSELF SECUREPASSWORD
If I look at datafile
strings /oracle/demo/data/users01.dbf|grep -i SECUREPASSWORD
SECUREPASSWORD
of course our data will be there exposed. Read more of this post
Recent Comments