Re: Does oracle provide encryption function??

In article <87q57f$gdn$1_at_nntp3.atl.mindspring.net>,   "Stephen Tenberg" <STenberg_at_fcs-usa.com> wrote:
>
> > >Could you tell me how Oracle stores the passwords?. I mean, what
> > >encryptation method Oracle uses?. Is there a tool to decrypt the
> > >passwords?.
> > >
> >
> > they are not encrypted. they are stored with a one way digest
(hash).
> >
> > take the username, the password plus a 'salt' -- grind them
together, get
> a
> > hash. thats the password you see. when someone gives us a
> username/password to
> > login -- we add the salt, grind them togehter and compare the
hashes.
> >
> > you cannot get the password back from the database.
> >
>
> Even if a digest is being used, it is still possible to accomplish
what the
> poster wants. I.e., they accept a username and password, compute the
> digest, and then compare to the actual digest.
>
> Is the algorithm published?
>
> Steve
>
>

Steve,

MMMMMMMM, I think the algorithm is not published. :-(

See, please, the answer of Rick Wessman.

Sent via Deja.com http://www.deja.com/
Before you buy. Received on Wed Feb 09 2000 - 12:16:00 CST