Oracle 12cR2 DBMS_TDE_TOOLKIT

Oracle DBMS_TDE_TOOLKIT_FFI Version 12.2.0.1

General Information

Library Note

Morgan's Library Page Header

Coming to OpenWorld 2018? Be sure to visit the TidalScale booth in Moscone South and learn how to solve performance problems and lower costs with Software Defined Servers. Before you visit the booth, or if you can't make it this year, check out TidalScale at www.tidalscale.com. Be sure to click on the Solutions link and look through the Oracle resources.

Purpose Utilities supporting Transparent Data Encryption and DataPump

AUTHID DEFINER

Dependencies

DBMS_TDE_TOOLKIT

TDE_LIBRARY

Documented No

First Available Not known

Security Model Owned by SYS with no privileges granted

Source {ORACLE_HOME}/rdbms/admin/prvtdtde.plb

Subprograms

DATAPUMP_DECRYPT

DATAPUMP_ENCRYPT

DATAPUMP_DECRYPT

Decrypts strings for DataPump dbms_tde_toolkit.datapump_encrypt( instring IN RAW, outstring OUT RAW, keyid IN RAW);

-- the use of StrPt1 to 3 is for webpage formatting only. The string used for testing is the one generated by the encrypt procedure below

DECLARE

       StrPt1  VARCHAR2(40) := '851714F5659E6983D619C768CC5F47CC818351EC';

       StrPt2  VARCHAR2(40) := '9F4809184EE13C2E9ECB490881D454B336E194A0';

       StrPt3  VARCHAR2(40) := 'AB47D616703F598F885AC1575437EF326A3';

       TestStr VARCHAR2(128) := StrPt1 || StrPt2 || StrPt3;

       TestVal RAW(128) := utl_raw.cast_to_raw(TestStr);

       RetKey  RAW(128) := utl_raw.cast_to_raw('abcdefgh');

       RetStr  RAW(2000);

      BEGIN

        dbms_tde_toolkit_ffi.datapump_encrypt(TestVal, RetStr, RetKey);

        dbms_output.put_line(RetStr);

      END;

      /

DATAPUMP_ENCRYPT

Encrypts strings for DataPump dbms_tde_toolkit.datapump_decrypt( instring IN RAW, outstring OUT RAW, keyid OUT RAW);

conn / as sysdba

      

      set serveroutput on

      

      DECLARE

       l_credit_card_no VARCHAR2(19) := '1612-1791-1809-2605';

       l_ccn_raw RAW(128) := utl_raw.cast_to_raw(l_credit_card_no);

       RetKey    RAW(128);

       RetStr    RAW(128);

      BEGIN

        dbms_tde_toolkit_ffi.datapump_encrypt(l_ccn_raw, RetStr, RetKey);

        dbms_output.put_line(RetStr);

        dbms_output.put_line(RetKey);

      END;

      /

      -- the following exception is generated if a wallet does not exist or exists and is not open

      DECLARE

      *

      ERROR at line 1:

      ORA-28365: wallet is not open

      ORA-06512: at "SYS.DBMS_TDE_TOOLKIT_FFI", line 5

      ORA-06512: at line 7

      

      -- for instructions on creating a wallet follow the link at page bottom

      ALTER SYSTEM SET ENCRYPTION WALLET OPEN IDENTIFIED BY "N0way!";

      

      DECLARE

       l_credit_card_no VARCHAR2(19) := '1612-1791-1809-2605';

       l_ccn_raw RAW(128) := utl_raw.cast_to_raw(l_credit_card_no);

       RetKey    RAW(128);

       RetStr    RAW(128);

      BEGIN

        dbms_tde_toolkit_ffi.datapump_encrypt(l_ccn_raw, RetStr, RetKey);

        dbms_output.put_line(RetStr);

        dbms_output.put_line(RetKey);

      END;

      /