Re: Does oracle provide encryption function??

> >Could you tell me how Oracle stores the passwords?. I mean, what
> >encryptation method Oracle uses?. Is there a tool to decrypt the
> >passwords?.
> >
>
> they are not encrypted. they are stored with a one way digest (hash).
>
> take the username, the password plus a 'salt' -- grind them together, get
a
> hash. thats the password you see. when someone gives us a
username/password to
> login -- we add the salt, grind them togehter and compare the hashes.
>
> you cannot get the password back from the database.
>

Even if a digest is being used, it is still possible to accomplish what the poster wants. I.e., they accept a username and password, compute the digest, and then compare to the actual digest.

Is the algorithm published?

Steve Received on Tue Feb 08 2000 - 16:26:40 CST