Oracle DBMS_TDE_TOOLKIT Demos

Oracle DBMS_TDE_TOOLKIT Version 11.2.0.3

General Information

AUTHID

DEFINER

Dependencies

DBMS_TDE_TOOLKIT_FFI	KUPP$PROC	UTL_RAW
KUPM$MCP	KUPW$WORKER

Security Model

Owned by SYS with no privileges granted

Source

{ORACLE_HOME}/rdbms/admin/prvtdtde.plb

DATAPUMP_DECRYPT

Decrypts strings for DataPump

dbms_tde_toolkit.datapump_encrypt(
instring IN VARCHAR2,
outstring OUT VARCHAR2,
keyid IN VARCHAR2);

As encryption can only be performed for a DataPump process decryption similarly includes a process check.

DATAPUMP_ENCRYPT

Encrypts strings for DataPump

dbms_tde_toolkit.datapump_decrypt(
instring IN VARCHAR2,
outstring OUT VARCHAR2,
keyid OUT VARCHAR2);

conn / as sysdba

set serveroutput on

DECLARE
TestStr VARCHAR(4000) := 'Dan Morgan';
RetKey VARCHAR2(32);
RetStr VARCHAR2(4000);
BEGIN
dbms_tde_toolkit.datapump_encrypt(TestStr, RetStr, RetKey);
dbms_output.put_line(RetStr);
dbms_output.put_line(RetKey);
END;
/

-- it detects that this is not a DataPump process
DECLARE
*
ERROR at line 1:
ORA-20109: Non-datapump process calling datapump_encrypt
ORA-06512: at "SYS.DBMS_TDE_TOOLKIT", line 19
ORA-06512: at line 6