DM8:达梦数据库加密算法
ENABLE_ENCRYPT 取值 0、1 和 2 分别代表不加密、SSL 加密、SSL 认证,默认值为 1。
call SF_SET_SYSTEM_PARA_VALUE ('ENABLE_ENCRYPT',0,1,2);
COMM_ENCRYPT_NAME 参数用来指定消息通信的加密算法名,如果为空则不进行通信加密;如果给的加密算法名错误,则使用加密算法 DES_CFB,默认值为空。
call SF_SET_SYSTEM_PARA_VALUE ('COMM_ENCRYPT_NAME','DES_CFB',1,2);
两种方法可分开使用,互不影响,配置后重启达梦数据库实例服务生效。 DM 支持的加密算法名可以通过查询动态视图 V$CIPHERS 获取。
SELECT * FROM SYS."V$CIPHERS";
CYT_ID | CYT_NAME | CYT_TYPE | BLOCK_SIZE | KH_SIZE | EXTEND_SIZE |
---|
129 | DES_ECB | 1 | 8 | 8 | 8 | 130 | DES_CBC | 1 | 8 | 8 | 8 | 132 | DES_CFB | 1 | 8 | 8 | 0 | 136 | DES_OFB | 1 | 8 | 8 | 0 | 257 | DESEDE_ECB | 1 | 8 | 16 | 8 | 258 | DESEDE_CBC | 1 | 8 | 16 | 8 | 260 | DESEDE_CFB | 1 | 8 | 16 | 0 | 264 | DESEDE_OFB | 1 | 8 | 16 | 0 | 513 | AES128_ECB | 1 | 16 | 16 | 16 | 514 | AES128_CBC | 1 | 16 | 16 | 16 | 516 | AES128_CFB | 1 | 16 | 16 | 0 | 520 | AES128_OFB | 1 | 16 | 16 | 0 | 1025 | AES192_ECB | 1 | 16 | 24 | 16 | 1026 | AES192_CBC | 1 | 16 | 24 | 16 | 1028 | AES192_CFB | 1 | 16 | 24 | 0 | 1032 | AES192_OFB | 1 | 16 | 24 | 0 | 2049 | AES256_ECB | 1 | 16 | 32 | 16 | 2050 | AES256_CBC | 1 | 16 | 32 | 16 | 2052 | AES256_CFB | 1 | 16 | 32 | 0 | 2056 | AES256_OFB | 1 | 16 | 32 | 0 | 4096 | RC4 | 2 | 0 | 16 | 0 | 4352 | MD5 | 4 | 0 | 16 | 0 | 4608 | SHA1 | 4 | 0 | 20 | 0 | 2176 | SHA224 | 4 | 0 | 28 | 0 | 2304 | SHA256 | 4 | 0 | 32 | 0 | 2432 | SHA384 | 4 | 0 | 48 | 0 | 2560 | SHA512 | 4 | 0 | 64 | 0 | 160 | DES_ECB_NOPAD | 1 | 8 | 8 | 0 | 144 | DES_CBC_NOPAD | 1 | 8 | 8 | 0 | 288 | DESEDE_ECB_NOPAD | 1 | 8 | 16 | 0 | 272 | DESEDE_CBC_NOPAD | 1 | 8 | 16 | 0 | 544 | AES128_ECB_NOPAD | 1 | 16 | 16 | 0 | 528 | AES128_CBC_NOPAD | 1 | 16 | 16 | 0 | 1056 | AES192_ECB_NOPAD | 1 | 16 | 24 | 0 | 1040 | AES192_CBC_NOPAD | 1 | 16 | 24 | 0 | 2080 | AES256_ECB_NOPAD | 1 | 16 | 32 | 0 | 2064 | AES256_CBC_NOPAD | 1 | 16 | 32 | 0 | 5201 | OPENSSL_SM4_ECB | 1 | 16 | 16 | 16 | 5202 | OPENSSL_SM4_CBC | 1 | 16 | 16 | 16 | 5203 | OPENSSL_SM4_CFB | 1 | 16 | 16 | 16 | 5204 | OPENSSL_SM4_OFB | 1 | 16 | 16 | 16 | 5207 | OPENSSL_SM3 | 4 | 0 | 32 | 0 | 5205 | OPENSSL_SM4_ECB_NOPAD | 1 | 16 | 16 | 0 | 5206 | OPENSSL_SM4_CBC_NOPAD | 1 | 16 | 16 | 0 | | | | | | |
|