Oracle | DBMS_TDE_TOOLKIT

Oracle DBMS_TDE_TOOLKIT_FFI Version 26ai

General Information

Library Note

Morgan's Library Page Header

The best Oracle News for FY2026

Oracle Database 26ai will be available on generic Linux platforms in January and soon on AIX and Windows

Purpose Utilities supporting Transparent Data Encryption and DataPump

AUTHID DEFINER

Dependencies

DBMS_TDE_TOOLKIT

TDE_LIBRARY

Documented No

First Available Not known

Security Model Owned by SYS with no privileges granted

Source {ORACLE_HOME}/rdbms/admin/prvtdtde.plb

Subprograms

DATAPUMP_DECRYPT

DATAPUMP_ENCRYPT

DATAPUMP_DECRYPT

Decrypts strings for DataPump dbms_tde_toolkit.datapump_encrypt( instring IN RAW, outstring OUT RAW, keyid IN RAW);

-- the use of StrPt1 to 3 is for webpage formatting only. The string used for testing is the one generated by the encrypt procedure below

      

      DECLARE

       StrPt1  VARCHAR2(40) := '851714F5659E6983D619C768CC5F47CC818351EC';

       StrPt2  VARCHAR2(40) := '9F4809184EE13C2E9ECB490881D454B336E194A0';

       StrPt3  VARCHAR2(40) := 'AB47D616703F598F885AC1575437EF326A3';

       TestStr VARCHAR2(128) := StrPt1 || StrPt2 || StrPt3;

       TestVal RAW(128) := utl_raw.cast_to_raw(TestStr);

       RetKey  RAW(128) := utl_raw.cast_to_raw('abcdefgh');

       RetStr  RAW(2000);

      BEGIN

        dbms_tde_toolkit_ffi.datapump_encrypt(TestVal, RetStr, RetKey);

        dbms_output.put_line(RetStr);

      END;

      /

DATAPUMP_ENCRYPT

Encrypts strings for DataPump dbms_tde_toolkit.datapump_decrypt( instring IN RAW, outstring OUT RAW, keyid OUT RAW);

conn / as sysdba

      

      set serveroutput on

      

      DECLARE

       l_credit_card_no VARCHAR2(19) := '1612-1791-1809-2605';

       l_ccn_raw RAW(128) := utl_raw.cast_to_raw(l_credit_card_no);

       RetKey    RAW(128);

       RetStr    RAW(128);

      BEGIN

        dbms_tde_toolkit_ffi.datapump_encrypt(l_ccn_raw, RetStr, RetKey);

        dbms_output.put_line(RetStr);

        dbms_output.put_line(RetKey);

      END;

      /

      -- the following exception is generated if a wallet does not exist or  is not open

      *

      ORA-28365: wallet is not open

      

      -- for instructions on creating a wallet follow the link at page bottom

      ALTER SYSTEM SET ENCRYPTION WALLET OPEN IDENTIFIED BY "N0way!";

      

      DECLARE

       l_credit_card_no VARCHAR2(19) := '1612-1791-1809-2605';

       l_ccn_raw RAW(128) := utl_raw.cast_to_raw(l_credit_card_no);

       RetKey    RAW(128);

       RetStr    RAW(128);

      BEGIN

        dbms_tde_toolkit_ffi.datapump_encrypt(l_ccn_raw, RetStr, RetKey);

        dbms_output.put_line(RetStr);

        dbms_output.put_line(RetKey);

      END;

      /