Deprecated and Desupported Features for Oracle AI Database

Oracle AI Database 26ai introduces behavior changes for your database in addition to new features.

Changes in behavior include deprecated and desupported initialization parameters, options, syntax, and the deprecation and desupport of features and components. For more information, see the Oracle AI Database Upgrade Guide.

Removal of 3DES Encryption Algorithm in FIPS-Compliant Mode

The 3DES encryption algorithm functionality for databases operating in FIPS 140-3 compliant mode is scheduled for removal later this year. Update your systems accordingly.

The National Institute of Standards and Technology (NIST) will move FIPS 140-2 to the historical list on 21 September 2026. Oracle is transitioning from FIPS 140-2 to FIPS 140-3 validated cryptographic modules for Oracle AI Database 26ai and Oracle Database 19c. FIPS 140-3 desupports the 3DES (Triple Data Encryption Standard) encryption algorithms. In compliance with this change to the updated standard, Oracle Database is desupporting the use of 3DES for Oracle Database 19c when databases are configured to run in FIPS 140-3 compliant mode. Support for 3DES in FIPS -complaint databases is scheduled for removal in 2026 with Oracle Database 19c Release Update 19.32. Oracle AI Database 26ai already desupports 3DES for use when the database is configured for FIPS 140-3.

In line with current security best practices, Oracle recommends transitioning to the Advanced Encryption Standard (AES). AES offers improved security, performance, and resistance to known attacks. Review your encryption configurations (including transparent data encryption and network encryption) to ensure that you do not use 3DES. If you have not already done so, convert Oracle Wallets created prior to Oracle Database 19.22 to use AES. If you find any use of 3DES, then transition to a more secure cipher such as AES. For additional details, refer to appendix E of the Oracle AI Database Security Guide.