[
https://issues.apache.org/jira/browse/TRAFODION-3293?focusedWorklogId=224234&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-224234
]
ASF GitHub Bot logged work on TRAFODION-3293:
---------------------------------------------
Author: ASF GitHub Bot
Created on: 08/Apr/19 07:55
Start Date: 08/Apr/19 07:55
Worklog Time Spent: 10m
Work Description: liuyu000 commented on pull request #1825:
[TRAFODION-3293] Add the AES_ENCRYPT Function in the Trafodion SQL Reference
Manual
URL: https://github.com/apache/trafodion/pull/1825#discussion_r272922819
##########
File path:
docs/sql_reference/src/asciidoc/_chapters/sql_functions_and_expressions.adoc
##########
@@ -487,6 +487,141 @@ LARGEINT if the precision of the argument is greater
than or equal to
ABS (-20 + 12)
```
+<<<
+[[aes_encrypt_function]]
+== AES_ENCRYPT Function
+
+The AES_ENCRYPT function encrypts a `_string_` using a specified encryption
`_key_` with the AES (Advanced Encryption Standard) algorithm and returns a
binary string.
+
+This function prevents sensitive data from being visible to the public. For
example, use the AES_ENCRYPT function to encrypt person identity number to
preserve user confidentiality.
+
+`AES_ENCRYPT (_string_, _key_)`
+
+[[syntax_description_of_aes_encrypt]]
+=== Syntax Description of AES_ENCRYPT
+
+* `_string_`
++
+is the data to be encrypted.
+
+* `_key_`
++
+is the encryption key to encrypt the `_string_`.
+
++
+TIP: The CQD `block_encryption_mode` controls the mode for the block-based
encryption algorithm. The default mode is the aes-128-ecb, which means the
encryption using a key length of 128 bits and the ECB mode.
+
++
+[cols="50%,50%"]
+|===
+^| *Value* ^| *Mode*
+^| 0 ^| aes-128-ecb
+^| 1 ^| aes-192-ecb
+^| 2 ^| aes-256-ecb
+|===
+
++
+*Example*
+
++
+The following examples show that the AES_ENCRYPT function returns the
different results based on the different modes.
+
++
+** The mode aes_192_ecb is in effect.
+
++
+```
+CQD BLOCK_ENCRYPTION_MODE '1';
+
+--- SQL operation complete.
+```
+
++
+```
+SELECT AES_ENCRYPT ('Technical_Writer','Coder') FROM DUAL;
+
+(EXPR)
+--------------------------------
+4}\îî¢Øã^ûh<á¼Æ7õé³ê!cH^Ð
+```
+
++
+** The mode aes_256_ecb is in effect.
+
++
+```
+CQD BLOCK_ENCRYPTION_MODE '2';
+
+--- SQL operation complete.
+```
+
++
+```
+SELECT AES_ENCRYPT ('Technical_Writer','Coder') FROM DUAL;
+
+(EXPR)
+--------------------------------
+Ô_8ÆðÑ=Uú2g1¥@°Ô3yä
+
+--- 1 row(s) selected.
+```
+
+[[considerations_for_aes_encrypt]]
+=== Considerations for AES_ENCRYPT
+
+Either argument cannot be NULL.
+
+[[examples_of_aes_encrypt]]
+=== Examples of AES_ENCRYPT
+
+* This example encrypts the string _'2019-11-02 00:00:00'_ with the key
_'888'_.
+
++
+```
+SELECT AES_ENCRYPT ('2019-11-02 00:00:00', '888') FROM DUAL;
+
+(EXPR)
+--------------------------------
+ºMµ-b(úaP\ìqXqsnTç<`®
+
+--- 1 row(s) selected.
+```
+
+* This example encrypts the string _'Oct 9, 2013 was my first day in
Muenster'_ with the key _'Germany-10:06'_ and inserts the encrypted string into
the table _t1_.
+
Review comment:
Before documenting the AES_DECRYPT function, I've tested the AES_DECRYPT
function and encountered a problem as below:
The AES_DECRYPT function works:
```
SELECT AES_DECRYPT(AES_ENCRYPT('aaa','b'),'b') FROM DUAL;
(EXPR)
----------------
aaa
--- 1 row(s) selected.
```
but fails:
- Example 1
```
SELECT AES_ENCRYPT ('aaa','b') FROM DUAL;
(EXPR)
----------------
"-=@ìÎzíøÄ(
--- 1 row(s) selected.
```
```
SELECT AES_DECRYPT ('"-=@ìÎzíøÄ(','b') FROM DUAL;
*** ERROR[8957] OpenSSL return error int the call to function AES_DECRYPT
FUNCTION [2019-04-08 07:00:21]
```
```
SQL>SELECT AES_DECRYPT ("-=@ìÎzíøÄ(,'b') FROM DUAL;
*** ERROR[15005] Unmatched quote in input (unterminated string):
SELECT AES_DECRYPT ("-=@ìÎzíøÄ(,'b') FROM DUAL; [2019-04-08 07:09:44]
```
- Example 2
```
SELECT * FROM t1;
C1
---------------------------------------------------------------------------------------------------
a
b
c
--- 3 row(s) selected.
```
```
SELECT c1, AES_DECRYPT (c1, 'd') FROM t1;
*** ERROR[8957] OpenSSL return error int the call to function AES_DECRYPT
FUNCTION [2019-04-08 07:49:57]
```
Is there something wrong with my test case?
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org
Issue Time Tracking
-------------------
Worklog Id: (was: 224234)
Time Spent: 4h (was: 3h 50m)
> Add the AES_ENCRYPT Function in the Trafodion SQL Reference Manual
> ------------------------------------------------------------------
>
> Key: TRAFODION-3293
> URL: https://issues.apache.org/jira/browse/TRAFODION-3293
> Project: Apache Trafodion
> Issue Type: Documentation
> Reporter: Liu Yu
> Priority: Major
> Fix For: 2.4
>
> Attachments: image-2019-04-05-19-57-51-005.png
>
> Time Spent: 4h
> Remaining Estimate: 0h
>
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
