cancel
Showing results for 
Search instead for 
Did you mean: 

SAPCRYPTOLIB vs Oracle ASO

Former Member
0 Kudos

Dear All,

We are currently using SAPCRYPTOLIB. We are thinking of implementing Oracle

ASO encryption.... Wondering if this is a redundent solution.

Thank you very much in advance,

Regards,

Accepted Solutions (1)

Accepted Solutions (1)

lbreddemann
Active Contributor
0 Kudos

>Wondering if this is a redundent solution.

Nope, it isn't.

SAPCRYPTOLIB is used in many places - but not in the communication from and to the Oracle database.

That's what you would use the Advances Security Option of Oracle for.

So these are complements to each other but do not overlap functions.

best regards,

LArs

Former Member
0 Kudos

Thanks Lars. Do you use ASO?

I am unsure what to use for

sqlnet.crypto_checksum_types_server|client and also

sqlnet.encryption_types_server|client?

Our system is a dual-stack. If I take the default encryption Oracle

will use AES256 but the ASO note says this is not supported on a Java

stack. Same for checksumming. If I take the default Oracle will use

SHA1 - which again is not supported for a Java stack system.

lbreddemann
Active Contributor
0 Kudos

Hi there,

I'm a database support consultant working for SAP - so, besides test systems, no I don't actually use ASO.

Anyhow, as we're in SAPonOracle-World: just do it as the note says.

And if it's not supported for JDBC (yet), then don't use it. Otherwise you may run into trouble for which the only help you'll get will be: disable it again.

regards,

Lars

Answers (0)