Once you implement this, the column length changes and it’s length will not report in DUMP or VSIZE functions.
- AES192 Advanced Encryption Standard (the default).
- 3DES168 Triple Data Encryption Standard 168-bit encryption
- AES128 Advanced Encryption Standard 128-bit encryption
- AES256 Advanced Encryption Standard 256-bit encryption
- Traditional exp/imp utilities are not supported for the objects from the encrypted tablespace. You should use data pump (expdp and impdp) for export.
- Encryption cannot be implemented on existing tablespace where as it is applicable for new tablespaces.
- Once you set the encryption key for a tablespace, it cannot be recreated.
- Encryption cannot be applicable for undo and temp tablespaces.
- You cannot transport an encrypted tablespace to a database that has already Oracle wallet configured. You should use expdp with ENCRYPTION_MODE=password and import into target database.
- You should set compatible parameter as 11.1 or higher for your database.
- External tables and BFILEs cannot be encrypted.
- The tablespace efficiency or performance will be lower than the un-encrypted tablespaces.
When a user enters data into the column defined as encrypted, Oracle Database 10g gets the master key from the wallet, decrypts the encryption key for that table from the data dictionary, uses that encryption key on the input value, and stores the encrypted data in the database.
When a user selects encrypted columns, Oracle Database 10g transparently retrieves the encrypted table key from the data dictionary, fetches the master key from the wallet, and decrypts the table key. Then the database decrypts the encrypted data on the disk and returns the clear text to the user.
- Add an entry to sqlnet.ora file
- Create the wallet directory and check whether oracle user has read write and execute permission for the directory.
- Set the encryption key for the wallet.
- Verify the wallet directory whether the file is created or not.
- Table encryption example(Oracle 10g has introduced table encryption)
- Tablespace encryption examples (Oracle 11g provides tablespace encryption)