OraFAQ Forum: Security » Hash Value for Passwords Stored in Oracle

Home » RDBMS Server » Security » Hash Value for Passwords Stored in Oracle

Show: Today's Messages :: Polls :: Message Navigator
E-mail to friend

Hash Value for Passwords Stored in Oracle [message #157329]

Wed, 01 February 2006 11:18

vthokiejjw
Messages: 1
Registered: February 2006
Location: Indianapolis

Junior Member

I have read the way the password value is supposed to be hashed, but we cannot find a way to actually reproduce that hashed value with a UserID/password combination.

You know, the Algorithm that was posted on a newsgroup back in 1993, then was in the book "Special Ops", and the article "An Assessment of the Oracle Password Hashing Algorithm" was written about it (http://www.sans.org/info/911/)?

Is this really the way it's done in Oracle?

If so... does anyone have a SQL or PL/SQL Script to actually reproduce the hash value? Many write-ups online say how easy it would be to reproduce it, but it's not posted anywhere that I can find. We have had tried many times, with no luck doing so...

Any ideas/thoughts?

[Updated on: Wed, 01 February 2006 14:13]

Report message to a moderator

Previous Topic:	Last Time User Login
Next Topic:	Locked Accounts

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

]

Current Time: Sun May 04 22:03:27 CDT 2025