Oracle Database Advanced Security 10g Release 1, Administrator'S Manual

Page: 490 / 518

Glossary-8
Diffie-Hellman key negotiation algorithm
This is a method that lets two parties communicating over an insecure channel to
agree upon a random number known only to them. Though the parties exchange
information over the insecure channel during execution of the Diffie-Hellman key
negotiation algorithm, it is computationally infeasible for an attacker to deduce the
random number they agree upon by analyzing their network communications.
Oracle Advanced Security uses the Diffie-Hellman key negotiation algorithm to
generate session keys.
digital signature
A digital signature is created when a public key algorithm is used to sign the
sender's message with the sender's private key. The digital signature assures that
the document is authentic, has not been forged by another entity, has not been
altered, and cannot be repudiated by the sender.
directory information tree (DIT)
A hierarchical tree-like structure consisting of the DNs of the entries in an LDAP
directory. See
distinguished name (DN)
directory naming
A naming method that resolves a database service, net service name , or net service
alias to a connect descriptor stored in a central directory server. A
directory naming context
A subtree which is of significance within a directory server. It is usually the top of
some organizational subtree. Some directories only permit one such context which
is fixed; others permit none to many to be configured by the directory
administrator.
Distributed Computing Environment (DCE)
A set of integrated network services that works across multiple systems to provide
a distributed environment. The middleware between distributed applications and
the operating system or networkservices; based on a client/server computing
model. DCE is supported by the Open Group.
distinguished name (DN)
The unique name of a directory entry. It is comprised of all of the individual names
of the parent entries back to the root entry of the directory information tree. See
directory information tree (DIT)