Do Not Use Encryption Algorithms that are Not Secure

낮음레벨 2수동 검토db2

설명

Encryption can be performed with various algorithms, some of which are outdated and should no longer be used.

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

Check that you are not using an outdated algorithm (like 3DES) by looking at the configuration settings.

조치 방법

조치 방식: 가이드 또는 인프라 패치

To determine what encryption options used to encrypt the database you can run the following command: db2 => get db cfg | grep -i encrypt Encryption Library for Backup (ENCRLIB) = libdb2encr.so Encryption Options for Backup (ENCROPTS) = CIPHER=AES:MODE=CBC:KEY LENGTH=256 Encrypted database = YES ENCROPTS should not contain CIPHER=3DES algorithm, because 3DES is not secure. CIPHER=AES is secure. You can also check the current database encryption settings: db2 => SELECT * FROM TABLE(SYSPROC.ADMIN_GET_ENCRYPTION_INFO()) You must be connected to the database to run this command. From the information retrieved, the ALGORITHM should not be 3DES.

속성

운영 체제: 모두
태그: db2databasemanual
참고 자료: CIS IBM Db2 12.1 Benchmark v1.0.0 - 8.2.2 Do Not Use Encryption Algorithms that are Not Secure