Oracle | DBMS_TDE

Oracle DBMS_TDE_TOOLKIT Version 21c

General Information

Library Note

Morgan's Library Page Header

ACE Director Alum Daniel Morgan, founder of Morgan's Library, is scheduling complimentary technical Workshops on Database Security for the first 30 Oracle Database customers located anywhere in North America, EMEA, LATAM, or APAC that send an email to asra_us@oracle.com. Request a Workshop for your organization today.

Purpose Utilities supporting Transparent Data Entryption usage with DataPump

AUTHID DEFINER

Dependencies

DBMS_STANDARD	KUPM$MCP	KUPW$WORKER
DBMS_TDE_TOOLKIT_FFI	KUPP$PROC	UTL_RAW

Documented No

First Available Not known

Security Model Owned by SYS with no privileges granted

Source {ORACLE_HOME}/rdbms/admin/prvtdtde.plb

Subprograms

DATAPUMP_DECRYPT

DATAPUMP_ENCRYPT

DATAPUMP_DECRYPT

Decrypts strings for DataPump dbms_tde_toolkit.datapump_encrypt( instring IN VARCHAR2, outstring OUT VARCHAR2, keyid IN VARCHAR2);

As encryption can only be performed for a DataPump process decryption similarly includes a process check.

DATAPUMP_ENCRYPT

Encrypts strings for DataPump dbms_tde_toolkit.datapump_decrypt( instring IN VARCHAR2, outstring OUT VARCHAR2, keyid OUT VARCHAR2);

conn / as sysdba

      

      set serveroutput on

      

      DECLARE

       TestStr VARCHAR(4000) := 'Dan Morgan';

       RetKey  VARCHAR2(32);

       RetStr  VARCHAR2(4000);

      BEGIN

        dbms_tde_toolkit.datapump_encrypt(TestStr, RetStr, RetKey);

        dbms_output.put_line(RetStr);

        dbms_output.put_line(RetKey);

      END;

      /

      

      -- it detects that this is not a DataPump process

      DECLARE

      *

      ERROR at line 1:

      ORA-20109: Non-datapump process calling datapump_encrypt

      ORA-06512: at "SYS.DBMS_TDE_TOOLKIT", line 19

      ORA-06512: at line 6