Re: Database Encryption (now required by law in Italy)

Поиск
Список
Период
Сортировка
От Joe Conway
Тема Re: Database Encryption (now required by law in Italy)
Дата
Msg-id 404CAD5D.6010503@joeconway.com
обсуждение исходный текст
Ответ на Re: Database Encryption (now required by law in Italy)  (Silvana Di Martino <silvanadimartino@tin.it>)
Ответы Re: Database Encryption (now required by law in Italy)  (Silvana Di Martino <silvanadimartino@tin.it>)
Список pgsql-admin
Silvana Di Martino wrote:
> Oracle has a built-in feature for encrypting/decrypting this password's
> password.

Right, and this master password is only protected because Oracle is
closed source. It is not possible to do the same thing with Postgres
because you could find the master key (or the algorithm to produce it)
in the source code.

However this amounts to "security by obscurity", and anyone serious
about encryption will tell you it is insufficient. There is no way to
have cryptographically sound protection of your data using a key
embedded in the software like that.

Joe


В списке pgsql-admin по дате отправления:

Предыдущее
От:
Дата:
Сообщение: Re: Database Encryption (now required by law in Italy)
Следующее
От: Bruce Momjian
Дата:
Сообщение: Re: Article on DB encryption