CREATE ENCRYPTION

From InterBase

Go Up to Statement and Function Reference (Language Reference Guide)


Creates encryption keys for use during the encryption process.

CREATE ENCRYPTION key-name [as default] [for {AES}] [with length number-of-bits [bits]] [password {'user-password' | system encryption password}] [init_vector {NULL | random}] [pad {NULL | random}] [description some user description]
Argument Description

Key-name

Name associated with the encryption key. Name must be unique.

For AES

Indicates the level of encryption InterBase will apply to the encrypted data. Advanced Encryption Standard (AES) is considered a strong encryption scheme.

Description: CREATE ENCRYPTION creates an encryption key. Only a SYSDSO (Data Security Owner) can create an encryption key. An encryption key is used to encrypt pages and/or columns of a database. The database owner uses an encryption key to perform encryption on a specific database or column. InterBase stores encryption keys in the RDB$ENCRYPTIONS system table.

Three new columns have been added to the RDB$RELATIONS_FIELDS table: RDB$ENCRYPTION_ID, RDB$DECRYPT_DEFAULT_VALUE and RDB$DECRYPT_DEFAULT_SOURCE to support the database page and column-level encryption as well.

Example: The following isql statement creates an encryption key called revenue_key using the AES encryption scheme and a length of 192 bits:

CREATE ENCRYPTION revenue_key FOR AES WITH LENGTH 192 BITS

See Also

Advance To: