使用 Oracle的存储过程实现数据加密和解密

 我们都知道，几乎所有的数据库都有存储过程，但在实际开发中，它有什么用途了？下面使用Oracle的存储过程，采用Oracle自带的dbms_obfuscation_toolkit.desencrypt对数据进行加密，需要注意的是密码的长度必须为8的倍数，然后使用Java来调用这个存储过程。
  具体的实现实例：
一、创建一个加密和解密的存储过程
第一步 创建表admin
create table admin(
ADMIN_ID number(10) primary key,
ADMIN_NAME varchar2(40) unique,
ADMIN_PWD varchar2(16) unique,
ADMIN_REALNAME varchar2(60),
ADMIN_EMAIL varchar2(60)
);
create sequence admin_seq;
第二步 插入数据
insert into admin values(admin_seq.nextval,'afeng','afeng1232323we23','陈征峰','czf@163.com');
select * from admin;
第三步 创建一个存储过程对ADMIN_PWD进行加密
CREATE OR REPLACE PROCEDURE Encrypt_admin(adminNAME varchar2)

  is
  keyString VARCHAR2(8) := 'czfafeng';
  encryptedString VARCHAR2(2048);
  pwdString VARCHAR2(2048);
  BEGIN
  select ADMIN_PWD into pwdString
  from admin
  where ADMIN_NAME = adminNAME;
  dbms_obfuscation_toolkit.desencrypt(
  input_string => pwdString,

  key_string => keyString,

  encrypted_string => encryptedString);

  update admin set ADMIN_PWD = encryptedString
  where ADMIN_NAME = adminNAME;

  commit;

  END;
第四步 调用加密过程
begin
  Encrypt_admin('afeng');
end;
第五步 创建一个存储过程对ADMIN_PWD进行解密后写入数据库
  CREATE OR REPLACE PROCEDURE decrypt_admin(adminNAME varchar2)

  is
  keyString VARCHAR2(8) := 'czfafeng';
  decryptedString VARCHAR2(2048);
  pwdString VARCHAR2(2048);
  BEGIN
  select ADMIN_PWD into pwdString
  from admin
  where ADMIN_NAME = adminNAME;
 

  dbms_obfuscation_toolkit.DESDecrypt(
  input_string => pwdString,

  key_string => keyString,

  decrypted_string => decryptedString);

  update admin set ADMIN_PWD = decryptedString
  where ADMIN_NAME = adminNAME;

  commit;

  END;
  第六步 调用解密过程
  begin
decrypt_admin('afeng');
end;
第七步 创建一个存储过程对ADMIN_PWD进行解密，并输出
CREATE OR REPLACE PROCEDURE decrypt_admin(adminNAME varchar2,decrypt_pwd out varchar2)

  is
  keyString VARCHAR2(8) := 'czfafeng';
  decryptedString VARCHAR2(2048);
  pwdString VARCHAR2(2048);
  BEGIN
  select ADMIN_PWD into pwdString
  from admin
  where ADMIN_NAME = adminNAME;
  dbms_obfuscation_toolkit.DESDecrypt(
  input_string => pwdString,

  key_string => keyString,

  decrypted_string => decryptedString);

  decrypt_pwd:=decryptedString;
 EXCEPTION
  WHEN Others
  -- NO_DATA_FOUND
  THEN

  decrypt_pwd:=trunc(DBMS_RANDOM.VALUE(1,200000)) ;

  END;
 

 第八步 调用解密过程

 declare

  pwd varchar2(40);
  begin
decrypt_admin('afeng1',pwd);
dbms_output.put_line(pwd);
end;
 
 
 
 
 
二、Java调用存储过程
import java.sql.Connection;
import java.sql.DriverManager;
import java.sql.PreparedStatement;
import java.sql.SQLException;
import java.util.Scanner;
 
import oracle.jdbc.OracleCallableStatement;
public class Produres_DES {
      public static Connection conn;
      public String sql;
      static{
            try {
                  Class.forName("oracle.jdbc.driver.OracleDriver");
                   conn=DriverManager.getConnection("jdbc:oracle:thin:@localhost:1521:orcl","system","orcl");
            } catch (ClassNotFoundException e) {
                  // TODO Auto-generated catchblock
                  e.printStackTrace();
            } catch (SQLException e) {
                  // TODO Auto-generated catchblock
                  e.printStackTrace();
            }
      }
       
      public void desDecrypt(){
            @SuppressWarnings("resource")
            Scanner input=new Scanner(System.in);
            System.out.println("请输入后台管理员的用户名：");
            String username=input.next();
            System.out.println("请输入后台管理员的密码：");
            String userpwd=input.next();
            String sql2="{call decrypt_admin(?,?)}";
            //生成一个执行过程的语句对象
            OracleCallableStatement ocs;
            try {
                  ocs = (OracleCallableStatement)conn.prepareCall(sql2);
                  ocs.setString(1, username);
                  ocs.registerOutParameter(2,java.sql.Types.VARCHAR);
                  ocs.execute();
                  String pwd=ocs.getString(2);
                  if(pwd.equals(userpwd)){
                        System.out.println("登录成功！");
                  }else{
                        System.out.println("登录失败");
                  }
                  ocs.close();
            } catch (SQLException e) {
                  // TODO Auto-generated catchblock
                  e.printStackTrace();
            }
             
      }
      public void desEncrypt(){
            String sql="insert into admin values(admin_seq.nextval,?,?,?,?)";
            @SuppressWarnings("resource")
            Scanner input=new Scanner(System.in);
            System.out.println("请输入后台管理员用户名：");
            String username=input.next();
            System.out.println("请输入后台管理员密码(长度为8的倍数)：");
            String pwd=input.next();
            System.out.println("请输入后台管理员的真实姓名：");
            String name=input.next();
            System.out.println("请输入后台管理员的邮箱：");
            String email=input.next();
            try {
                  PreparedStatement pstmt=conn.prepareStatement(sql);
                  pstmt.setString(1, username);
                  pstmt.setString(2, pwd);
                  pstmt.setString(3, name);
                  pstmt.setString(4, email);
                  pstmt.executeUpdate();
                  String sql2="{call Encrypt_admin(?)}";
                  //生成一个执行过程的语句对象
                  OracleCallableStatement ocs=(OracleCallableStatement)conn.prepareCall(sql2);
                  ocs.setString(1, username);
                  ocs.execute();
                  ocs.close();
                  System.out.println("插入数据和加密成功！");
            } catch (SQLException e) {
                  // TODO Auto-generated catchblock
                  e.printStackTrace();
            }
             
      }
       
  public static void main(String[] args) {
        Produres_DES des=new Produres_DES();
        //des.desEncrypt();
        des.desDecrypt();
       
}
}