Hello, Alex!
Tuesday, April 3, 2012, 11:55:16 AM, you wrote:
AP> To work with encrypted database file we need a tool to encrypt database.
AP> I see 3 possible solutions for it. In all 3 cases some plugin dependent
AP> parameter may be passed to plugin. In all cases one may use decrypt
AP> instead encrypt to make
AP> 1. ALTER DATABASE ENCRYPT WITH <PLUGIN_NAME> { ('PARAMETER') }
If you like, I can tell you how encryption is done in InterBase :-)
at least
- there are no tools to encrypt/decrypt db, it's being done
only via SQL
- there is new SYSDSO user that creates System Encryption Password,
encryption keys, and can grant other users to use encryption keys.
(SYSDSO can't do nothing else with DB).
- then, granted user can encrypt/decrypt db or columns, or both.
- database that moved to another server requests specifying
System Encryption Password in addition to usual username/password.
etc.
--
Dmitry Kuzmenko, www.ibase.ru, (495) 953-13-34
------------------------------------------------------------------------------
Better than sec? Nothing is better than sec when it comes to
monitoring Big Data applications. Try Boundary one-second
resolution app monitoring today. Free.
http://p.sf.net/sfu/Boundary-dev2dev
Firebird-Devel mailing list, web interface at
https://lists.sourceforge.net/lists/listinfo/firebird-devel
