Transparent data encryption: Difference between revisions

Revision as of 19:57, 14 October 2019

Revision as of 11:28, 7 November 2019

Line 6:

IBM offers TDE as part of [[IBM Db2|Db2]] as of version 10.5 fixpack 5<ref>https://www.ibm.com/support/knowledgecenter/SSEPGG_10.5.0/com.ibm.db2.luw.wn.doc/doc/c0061179.html</ref>. It is also supported in cloud versions of the product by default, Db2 on Cloud and Db2 Warehouse on Cloud.

Oracle requires the [[Oracle Advanced Security]] option for Oracle 10g and 11g to enable TDE.{{cn|date=July 2016}} Oracle TDE addresses encryption requirements associated with public and private privacy and security mandates such as PCI and [[California]] [[SB 1386]]. Oracle Advanced Security TDE column encryption was introduced in Oracle Database 10g Release 2. Oracle Advanced Security TDE tablespace encryption and support for [[Hardwarehardware Securitysecurity Modulemodule]]s (HSMs) were introduced with Oracle Database 11gR1. Keys for TDE can be stored in an HSM to manage keys across servers, protect keys with hardware, and introduce a separation of duties.

The same key is used to encrypt columns in a table, regardless of the number of columns to be encrypted. These encryption keys are encrypted using the database server master key and are stored in a dictionary table in the database.