RE: Encrypting a password

From: Christopher Spence <cspence_at_FuelSpot.com>
Date: Mon, 30 Jul 2001 12:15:46 -0700
Message-ID: <F001.0035939C.20010730120032@fatcity.com>

DBMS_OBFUSCATION package is exactly what you want.

I have build something like this with DBMS_OBFUSCATION although I did not compare against /etc/passwd.

I simply provided a "login" procedure, createKey, savePassword, retrievePassword.

I used a createKey function to create keys that were basically RAW(128) if I remember correctly, then I had password stored encrypted in the database, then another table with a FK to the user table which stored the key in encrypted form.

You would need to join the key table with the encrypted password to decrypt or cross exam.

"Walking on water and developing software from a specification are easy if both are frozen."

Christopher R. Spence
Oracle DBA
Fuelspot

-----Original Message-----
Sent: Friday, July 27, 2001 2:51 PM
To: Multiple recipients of list ORACLE-L

How can I encrypt a password in Oracle that I could use to compare with an encrypted password in /etc/passwd on a Sun Unix box? I am on Solaris 2.8 running Oracle 8.1.7.

I have read about encrypting and decrypting using the dbms_obfuscation package, but this does not seem to get me what I am looking for.

Any information would be greatly appreciated.

Thanks,

Rick Stephenson

--

Please see the official ORACLE-L FAQ: http://www.orafaq.com
--

Author:
INET: Rick_Stephenson_at_ovid.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------

To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
--

Please see the official ORACLE-L FAQ: http://www.orafaq.com
--

Author: Christopher Spence
INET: cspence_at_FuelSpot.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------