Oracle | DBMS_TDE

Oracle DBMS_TDE_TOOLKIT Version 21c

General Information

Library Note

Morgan's Library Page Header

Which has the higher priority in your organization: Deploying a new database or securing the ones you already have? Looking for a website, and resources, dedicated solely to securing Oracle databases? Check out DBSecWorx.

Purpose Utilities supporting Transparent Data Entryption usage with DataPump

AUTHID DEFINER

Dependencies

DBMS_STANDARD	KUPM$MCP	KUPW$WORKER
DBMS_TDE_TOOLKIT_FFI	KUPP$PROC	UTL_RAW

Documented No

First Available Not known

Security Model Owned by SYS with no privileges granted

Source {ORACLE_HOME}/rdbms/admin/prvtdtde.plb

Subprograms

DATAPUMP_DECRYPT

DATAPUMP_ENCRYPT

DATAPUMP_DECRYPT

Decrypts strings for DataPump dbms_tde_toolkit.datapump_encrypt( instring IN VARCHAR2, outstring OUT VARCHAR2, keyid IN VARCHAR2);

As encryption can only be performed for a DataPump process decryption similarly includes a process check.

DATAPUMP_ENCRYPT

Encrypts strings for DataPump dbms_tde_toolkit.datapump_decrypt( instring IN VARCHAR2, outstring OUT VARCHAR2, keyid OUT VARCHAR2);

conn / as sysdba

      

      set serveroutput on

      

      DECLARE

       TestStr VARCHAR(4000) := 'Dan Morgan';

       RetKey  VARCHAR2(32);

       RetStr  VARCHAR2(4000);

      BEGIN

        dbms_tde_toolkit.datapump_encrypt(TestStr, RetStr, RetKey);

        dbms_output.put_line(RetStr);

        dbms_output.put_line(RetKey);

      END;

      /

      

      -- it detects that this is not a DataPump process

      DECLARE

      *

      ERROR at line 1:

      ORA-20109: Non-datapump process calling datapump_encrypt

      ORA-06512: at "SYS.DBMS_TDE_TOOLKIT", line 19

      ORA-06512: at line 6