Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Mailing Lists -> Oracle-L -> Re: encrypt passwords and hold on Oracle tables

Re: encrypt passwords and hold on Oracle tables

From: Jared Still <jkstill_at_bcbso.com>
Date: Mon, 21 Aug 2000 08:35:05 -0700 (PDT)
Message-Id: <10596.115112@fatcity.com>


On Tue, 15 Aug 2000, Ashish Shah wrote:

> you can try using package
> dbms_obfuscation_toolkit.desencrypt...

>=20

> This will encrypt and decrypt data for you...
>=20

> the only problem is if someone knows how to
> run this package to decrypt the data he can
> have access to passwords...

Knowing how to execute the package will not let you decrypt data unless you know what the key is.

Jared

>=20

> well you can have a look.
>=20

> Let me know if someone have any better way
> securing passwds after encrypting it.
>=20

> Thanks.
>=20
>=20

> --- John Dunn <john.dunn_at_sefas.co.uk> wrote:
> > Our development team want to control access to
> > application functionality via
> > 'logical' users. That is, a list of users and the
> > application functions they
> > can use will be maintained in a database table.
> > Actual connection to the
> > database would always be via one user(maybe the
> > schema owner, maybe some
> > other single specified user).
> >=20
> > Does anyone else have applications that work in this
> > way? What use do you
> > use to connect to the database?
> >=20
> > The 'logical' users would also have passwords that
> > would need to be held on
> > the database tables. Is there any (easy) way to
> > encrypt a character string
> > and store it on the database?
> >=20
> > The front end application is Visual Basic using
> > OO4O...but we use lots of
> > PL/SQL too.
> >=20
> > Database is Oracle 8.0.5
> >=20
> > John
> >=20
> > =20
> > --=20
> > Author: John Dunn
> > INET: john.dunn_at_sefas.co.uk
> >=20
> > Fat City Network Services -- (858) 538-5051 FAX:
> > (858) 538-5051
> > San Diego, California -- Public Internet
> > access / Mailing Lists
> >
> --------------------------------------------------------------------
> > To REMOVE yourself from this mailing list, send an
> > E-Mail message
> > to: ListGuru_at_fatcity.com (note EXACT spelling of
> > 'ListGuru') and in
> > the message BODY, include a line containing: UNSUB
> > ORACLE-L
> > (or the name of mailing list you want to be removed
> > from). You may
> > also send the HELP command for other information
> > (like subscribing).
>=20
>=20

> =3D=3D=3D=3D=3D
> Ashish
> Toronto, Canada
>=20

> __________________________________________________
> Do You Yahoo!?
> Yahoo! Mail =96 Free email you can access from anywhere!
> http://mail.yahoo.com/
> --=20
> Author: Ashish Shah
> INET: ar_shah_at_yahoo.com
>=20

> Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
> San Diego, California -- Public Internet access / Mailing Lists
> --------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from). You may
> also send the HELP command for other information (like subscribing).
>=20

Jared Still
Certified Oracle DBA and Part Time Perl Evangelist ;-) Regence BlueCross BlueShield of Oregon Received on Mon Aug 21 2000 - 10:35:05 CDT

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US