About Encryption; Advanced Encryption Standard; Des Algorithm Support; Triple-Des Support - Oracle Database B10772-01 Administrator's Manual

Oracle Advanced Security Encryption

About Encryption

The purpose of a secure cryptosystem is to convert
ciphertext
infeasible) to convert ciphertext back into its corresponding plaintext without
knowledge of the correct key. In a symmetric cryptosystem, the same key is used
both for encryption and decryption of the same data. Oracle Advanced Security
provides the Advanced Encryption Standard (AES), DES, 3DES, and RC4
symmetric cryptosystems for protecting the confidentiality of Oracle Net Services
traffic.

Advanced Encryption Standard

In this release, the new Federal Information Processing Standard (FIPS) encryption
algorithm, Advanced Encryption Standard (AES), is supported. AES can be used by
all U.S. government organizations and businesses to protect sensitive data over a
network. This encryption algorithm defines three standard key lengths, which are
128-bit, 192-bit, and 256-bit. All versions operate in outer
(CBC)

DES Algorithm Support

Oracle Advanced Security provides the Data Encryption Standard (DES) algorithm.
DES has been a U.S. government standard for many years and is sometimes
mandated in the financial services industry. Because it has been a standard for so
long, DES is deployed throughout the world for use in a wide variety of
applications.

Triple-DES Support

Oracle Advanced Security supports Triple-DES encryption (3DES), which encrypts
message data with three passes of the DES algorithm. 3DES provides a high degree
3-2 Oracle Database Advanced Security Administrator's Guide
Prior to Release 8.1.7, Oracle Advanced Security provided
Note:
three editions: Domestic, Upgrade, and Export—each with different
key lengths. This release now contains a complete complement of
the available encryption algorithms and key lengths, previously
only available in the Domestic edition. Users deploying prior
versions of the product can obtain the Domestic edition for a
specific product release.
based on a key, in such a way that it is very hard (computationally
mode.
plaintext data into unintelligible
Cipher Block Chaining