Download IBM Informix Dynamic Server Enterprise Replication Guide

Transcript
ENCRYPT_SWITCH Configuration Parameter
syntax
ENCRYPT_SWITCH cipher_switch_time, key_switch_time
■
cipher_switch_time specifies the minutes between cipher
renegotiation
■
key_switch_time specifies the minutes between secret key
renegotiation
default value
60,60
units
minutes
range of values
positive integers
takes effect
when Enterprise Replication is initialized
The ENCRYPT_SWITCH configuration parameter defines the frequency at
which ciphers or secret keys are renegotiated. The longer the secret key and
encryption cipher remains in use, the more likely the encryption rules might
be broken by an attacker. To avoid this, cryptologists recommend changing
the secret keys on long-term connections. The default time that this renegotiation occurs is once an hour.
B-20 IBM Informix Dynamic Server Enterprise Replication Guide