After reading this article in the Oracle Magazine, i was eager to try the following part myself:
To confirm encryption, you can insert a record with a value “David†for FIRST_NAME and search the datafile you created for the enc128_ts tablespace for that value:
SQL> insert into accounts_enc values (1, 'David' , ...); $ strings enc128ts_ts.dbf | grep David
This will not show any output, because the “David†value has been stored in an encrypted tablespace. Searching for a cleartext value found nothing, as expected. (Note that if you do a string search in a file of an unencrypted tablespace, a successful search will return the cleartext from the file.)
I got the following:
[ZZXJFF@OCP04:W2ZZXJFF02] SQL> create tablespace jeroen datafile '/m001/oradata/OCP04/jeroen.dbf' size 5m; [ZZXJFF@OCP04:W2ZZXJFF02] SQL> create table blaat2 (a number(2), b varchar2(64)) tablespace jeroen; [ZZXJFF@OCP04:W2ZZXJFF02] SQL> insert into blaat2 values (24,'Pouwiel'); [ZZXJFF@OCP04:W2ZZXJFF02] SQL> commit; W2ZZXJFF02():/m001/oradata/OCP04>strings jeroen.dbf|grep Pouwiel W2ZZXJFF02():/m001/oradata/OCP04>lr total 17607232 -rw-r----- 1 oinstall 10486272 Mar 25 11:05 OCP04redo11.rdl -rw-r----- 1 oinstall 10486272 Mar 25 11:40 OCP04redo21.rdl -rw-r----- 1 oinstall 5903753216 Mar 25 11:45 OCP04users01.dbf -rw-r----- 1 oinstall 13639680 Mar 25 11:45 OCP04tools01.dbf -rw-r----- 1 oinstall 786440192 Mar 25 11:45 OCP04system02.dbf -rw-r----- 1 oinstall 5251072 Mar 25 11:45 jeroen.dbf -rw-r----- 1 oinstall 1993351168 Mar 25 11:46 OCP04system01.dbf -rw-r----- 1 oinstall 272637952 Mar 25 11:46 OCP04sysaux01.dbf -rw-r----- 1 oinstall 10486272 Mar 25 11:46 OCP04redo31.rdl -rw-r----- 1 oinstall 3883008 Mar 25 11:46 OCP04control01.ctl
I was quite surprised that i didn’t receive any output, till i was fiendishly pointed out by Remi that i might be a good idea to check the redo logs….
And there ya go:
W2ZZXJFF02():/m001/oradata/OCP04>strings /m002/oradata/OCP04/OCP04redo22.rdl|grep Pouwiel Pouwiel
After a couple of logfile switches:
W2ZZXJFF02():/m001/oradata/OCP04>strings jeroen.dbf|grep Pouwiel Pouwiel}-