Re: Oracle Password Encryption Algorithm

From: Rob van Lopik <r.a.m.van.lopik_at_fd.agro.nl>
Date: 1997/03/13
Message-ID: <01bc2f8a$968dd0c0$01be0c91@tait43.tfdl.agro.nl>#1/1

Frank Kobylanski <this_person_at_thisplace.com> wrote in article <5g734c$ecm$1_at_newsin-1.starnet.net>...
> dave_at_fifthd.ca (Dave Macpherson) wrote:
>
> >Does anyone know the algorithm used to encrypt an Oracle password? I
> >need to verify that a password entered in by a user matches an
> >encrypted password stored in DBA_USERS.

> >Regards,

> >Dave Macpherson
>
> If the alogorithm were published, it would kind of defeat the purpose
> of having a password now, wouldn't it???

No, it doesn't, because it is supposed to be one-way only. Your password gets hashed into something that is stored in the database, but the algorithm cannot be run the other way around, that is, you cannot produce the clear password from the rubbish that you will find in DBA_USERS.

rob van lopik Received on Thu Mar 13 1997 - 00:00:00 CST