Oracle Data Redaction (DBMS_REDACT)

Oracle Data Redaction enables you to mask (redact) data that is returned from queries issued by applications. You can redact column data by using one of the following methods:

• Full redaction
• Random redaction
• Partial redaction
• Regular expressions

RMAN Backup and Transparent Encryption

Oracle Transparent encryption can help with creating and restoring encrypted RMAN backups with no DBA intervention, as long as the required Oracle key management infrastructure is available.

Transparent encryption is best suited for day-to-day backup operations, where backups will be restored at the same database that they were backed up from. Transparent encryption is the default mode for RMAN encryption.

When using transparent encryption, you must first configure the Oracle Encryption Wallet. After the Oracle Encryption Wallet is configured, encrypted backups can be created and restored with no further DBA intervention.

RMAN Backup and Password Encryption

Password encryption is ideal for customers who are not already encrypting data in the database and simply want their database backup encrypted. It is important to use a complex password made up of characters and numbers to prevent a thief from easily breaking the encryption and reading the clear text data.

No need for a wallet manager, but requires to specify a password for the encryption and decryption.

NOTE: If you loose  password , you can not decrypt and restore your backup.