Which paper of Aarons are you referring to? Is the paper entitled "Encryption of data at rest"?
Regards, Craig Munday.
At 05:29 AM 29/09/2003 -0800, you wrote:
Hi Jp
On the specific issue of encryption your main concern will be hiding the encryption key from any prying eyes. There is a couple of links to papers on my site about encryption in Oracle http://www.petefinnigan.com /orasec.htm especially the link to Aarons paper which discusses the key hiding issue. I also wrote a paper for iDefense.com earlier this year about encrypting data in Oracle databases. It was slightly high level as it was aimed at what the possibilities and tools available are. It is not in the public domain so i cannot send out copies but if you email them you might be able to get a copy from them.
hope this helps a bit
kind regards
Pete
--
Pete Finnigan
email:[EMAIL PROTECTED]
Web site: http://www.petefinnigan.com - Oracle security audit specialists
Book:Oracle security step-by-step Guide - see http://store.sans.org for details.
-- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Pete Finnigan INET: [EMAIL PROTECTED]
Fat City Network Services -- 858-538-5051 http://www.fatcity.com San Diego, California -- Mailing list and web hosting services --------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
-- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Craig Munday INET: [EMAIL PROTECTED]
Fat City Network Services -- 858-538-5051 http://www.fatcity.com San Diego, California -- Mailing list and web hosting services --------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
