Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Usenet -> c.d.o.server -> Re: encrypt fields, passwords??

Re: encrypt fields, passwords??

From: Pete Finnigan <pete_at_petefinnigan.com>
Date: Fri, 29 Aug 2003 16:15:16 +0100
Message-ID: <2hXxC9BE42T$Ew4C@peterfinnigan.demon.co.uk>


Hi

Store your passwords encrypted in the database not in clear text. If you wish to use PL/SQL have a look at the DBMS_OBFUSCATION_TOOLKIT package. Bear in mind key management can be a headache. Have a look at my white papers section at http://www.petefinnigan.com, there is a link to a paper on there that discusses key hiding and encryption of data, I don't have access to my site right now to remember who wrote it but you will find a link on there.

hth

Kind regards

Pete

-- 
Pete Finnigan
email:pete_at_petefinnigan.com
Web site: http://www.petefinnigan.com - Oracle security audit specialists
Book:Oracle security step-by-step Guide - see http://store.sans.org for details.
Received on Fri Aug 29 2003 - 10:15:16 CDT

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US