encryption

SQL Server Always On Availability Groups and Database Master Keys: A Hidden Failover Pitfall

I recently came across an interesting case involving a client whose application used SQL Server symmetric keys to encrypt sensitive data. The database was hosted in an Always On Availability Group environment for high-availability and disaster-recovery. The interesting(…)

Beyond TDE and TLS: Bridging the Data Security Governance Gap in Lower Environments

Why one layer is never enough, why dev environments are your biggest GDPR gap, and how to industrialize their governance.

Setting up TLS encryption and authentication in MongoDB

When securing a MongoDB deployment, protecting sensitive data is essential. MongoDB supports encryption throughout the lifecycle of the data, with three primary types of data encryption : Encryption in transit Encryption at rest Encryption in use Among these,(…)

Documentum – Encrypt BOF passwords with a minimal jar file

Nowadays, with DevOps and containers approaches, you will often see components or software that try to go on a diet, to reduce the size needed to deploy them and therefore the images/containers associated to it. I was recently asked(…)

MySQL 8 and Security – Encryption of binary logs

As I discussed in some of my recent talks at conferences (at the DOAG for example), MySQL 8 came out with new features which bring lots of improvements in terms of security.

Transparent Data Encryption – Certificate in master database: is it really a good practice?

As encryption solution in SQL Server, Transparent Data Encryption (TDE) is simple and quick to set up. That's why this is a common encryption mechanism. TDE encrypts data with a certificate at the page level, before SQL Server writes on(…)

Encryption of shell scripts

In this blog, I will talk about the encryption of files and in particular the encryption of a shell script because that was my use case. Before starting, some people may say/think that you shouldn’t encrypt any scripts and I(…)

Oracle 12cR2: Online tablespace encryption

By Franck Pachot . By default, all data is visible in the datafiles. Transparent Tablespace Encryption (TDE) can be used to get them encrypted. It requires Enterprise Edition plus Advanced Security Option. Except in the Oracle Cloud when it is(…)

Securing your connections to PostgreSQL by using SSL

Security is a big topic today and in the news almost every day. As the database usually holds sensitive data this data must be well protected. In most cases this is done by encrypting critical data inside the database and(…)

Use a wallet to encrypt Oracle client passwords

In our more and more connected world, security is a big concern. Storing password is a very important topic because if a machine is compromised, we can assume that any password stored in clear text are also compromised. I had(…)