DBMS_OBFUSCATION vs DBMS

From: Greg Tubbs <gtubbs_at_llnl.gov>
Date: Thu, 13 Oct 2005 14:24:30 -0700
Message-Id: <5.2.1.1.2.20051013142351.05037848@mail.llnl.gov>

Can someone explain why I get different results for the following test? I was expecting the ciphertext to be the same. I am running oracle 10.1.0.3 on linux.

Any help in explaining this would be appreciated.

DECLARE

       seed                      VARCHAR2(128) :=  'this is the seed';
       key                       RAW(128);
       block_size                INTEGER := 8;

       plain_text                VARCHAR2(128) :=  'this is the string that 
will be encrypted';
       old_ciphertext            RAW(128);
       new_ciphertext            RAW(128);

       blocks                    INTEGER;
       pad_chr                   VARCHAR2(1) := '*';

BEGIN

create the key from the seed key := UTL_I18N.STRING_TO_RAW(seed, 'AL32UTF8');

pad the plaintext so that the last block is complete
NOTE: this is requried for the DBMS_OBFUSCATION_TOOLKIT because it does not support padding
--
IF (LENGTH(plain_text) MOD block_size > 0) THEN blocks := TRUNC(LENGTH(plain_text)/block_size) + 1; plain_text := RPAD(plain_text, blocks * block_size, pad_chr); END IF;

compute the ciphertext using DBMS_OBFUSCATION_TOOLKIT
--
DBMS_OBFUSCATION_TOOLKIT.Des3Encrypt( input => UTL_I18N.STRING_TO_RAW(plain_text, 'AL32UTF8'), encrypted_data => old_ciphertext , key => key );

compute (hopefully) the same ciphertext using DBMS_CRYPTO
--
new_ciphertext := DBMS_CRYPTO.encrypt( src => UTL_I18N.STRING_TO_RAW(plain_text, 'AL32UTF8') , typ => DBMS_CRYPTO.ENCRYPT_3DES_2KEY + DBMS_CRYPTO.CHAIN_CBC + DBMS_CRYPTO.PAD_NONE , key => key );

      DBMS_OUTPUT.PUT_LINE('DBMS_OFUSCATION_TOOLKIT: ');
      DBMS_OUTPUT.PUT_LINE(UTL_RAW.CAST_TO_VARCHAR2(UTL_ENCODE.BASE64_ENCODE(old_ciphertext)));

      DBMS_OUTPUT.PUT_LINE('DBMS_CRYPTO: ');
      DBMS_OUTPUT.PUT_LINE(UTL_RAW.CAST_TO_VARCHAR2(UTL_ENCODE.BASE64_ENCODE(new_ciphertext)));

END;
/

Results are :
DBMS_OFUSCATION_TOOLKIT:
B9IsF4na0qiQyg83o27gnWECad5MvG2QmkHdUKxJWwONdCoKoiFn0qhlERMqBjpt

DBMS_CRYPTO:
CH54MSIqv7UVBufSj4S2gy/liDwwb6YpBuz+C+NkOr7cok8vLinWeL6usA02zAIA

--
http://www.freelists.org/webpage/oracle-l

Received on Thu Oct 13 2005 - 16:29:49 CDT

DBMS_OBFUSCATION vs DBMS_CRYPTO