Oracle 视图 V$DATABASE_KEY_INFO 官方解释,作用,如何使用详细说明

本站中文解释

V$DATABASE_KEY_INFO 视图提供关于数据库加密密钥授权和使用情况的信息。这个视图主要是为数据库加密及数据安全提供支持,例如TDE(transparent data encryption)和DBMS_CRYPTO等。

V$DATABASE_KEY_INFO 视图的常用列:

KEY_ID:密钥的数据库标识。

AUTH_TYPE:授权类型,可能的选项包括:DBMS_CRYPTO, AUTH_WALLET, MOUNT_POINT(挂载点), DIRECTORY(目录), JAVA IoC KEYSTORE(java IO Keystore)

ALGORITHM: 密钥使用的算法

CREATION_TIME:密钥创建时间

USAGE_COUNT:密钥正在使用的数量

最常见的 V$DATABASE_KEY_INFO 使用可能来检查TDE已正确配置:

SELECT key_id, auth_type, creation_time FROM v$database_key_info WHERE auth_type = ‘AUTH_WALLET’;

官方英文解释

V$DATABASE_KEY_INFO provides the information of the default database key used to encrypt data blocks. Oracle uses the database key to encrypt sensitive information in SYSTEM, UNDO, and TEMP tablespaces when such data has dependency from encrypted tablespaces or encrypted columns

V$DATABASE_KEY_INFO reflects the database key information stored in the control file. Generally it is the same as the system tablespace key recorded in the system tablespace. If the system tablespace is encrypted, it will also appear in V$ENCRYPTED_TABLESPACES. If the system tablespace is not encrypted, this is the only view providing this information.

Column Datatype Description

ENCRYPTIONALG

VARCHAR2(7)

Encryption algorithm:

  • NONE

  • 3DES168

  • AES128

  • AES192

  • AES256

AES128 is the default encryption algorithm.

ENCRYPTEDKEY

RAW(48)

Encrypted version of the database key

MASTERKEYID

RAW(16)

ID of the master key that was used to encrypt the database key

MASTER_ACTIVATED

VARCHAR2(3)

Indicates whether the master key has been set (YES) or not (NO) for this database or container in the Oracle Key Store. In other words, indicates whether Transparent Data Encryption (TDE) has been activated for this database or container

CON_ID

NUMBER

The ID of the container to which the data pertains. Possible values include:

  • 0: This value is used for rows containing data that pertain to the entire CDB. This value is also used for rows in non-CDBs.

  • 1: This value is used for rows containing data that pertain to only the root

  • n: Where n is the applicable container ID for the rows containing data

See Also:

“V$ENCRYPTED_TABLESPACES”


数据运维技术 » Oracle 视图 V$DATABASE_KEY_INFO 官方解释,作用,如何使用详细说明