Differences Between DBMS_CRYPTO and DBMS_OBFUSCATION_TOOLKIT
There are a number of key differences between the DBMS_CRYPTO and DBMS_OBFUSCATION_TOOLKIT packages, summarized below:
- Advanced Encryption Standard
The DES and DES3 algorithms have been showing signs of age, and many organizations are now using a more secure symmetric encryption algorithm, the Advanced Encryption Standard (AES). The DBMS_OBFUSCATION_TOOLKIT package does not support encryption using this newer standard, but DBMS_CRYPTO does.
- Stream ciphering
Encryption can be performed on a block of data at a time via a process known as block ciphering . This method is the most common and the easiest to implement. However, some systems may not have the luxury of getting data in uniform chunks—for example, encrypted content relayed through the public media or other outlets. In such cases, the content must be encrypted, as it comes in, via a process known as stream ciphering. The DBMS_OBFUSCATION_TOOLKIT package does not support stream ciphering, but DBMS_CRYPTO does.
- Secure Hash Algorithm
The DBMS_OBFUSCATION_TOOLKIT package supports only the Message Digest (MD5) function for cryptographic hashing, not more modern and secure algorithms such as the Secure Hash Algorithm 1 (SHA-1) provided by DBMS_CRYPTO.
- Message Authentication Code
The use of a Message Authentication Code (MAC) allows the creation of a hashed value of the message to be transmitted; that value may then be compared with the value calculated on the message ...