Hash Value for Passwords Stored in Oracle [message #157329] |
Wed, 01 February 2006 11:18 |
vthokiejjw
Messages: 1 Registered: February 2006 Location: Indianapolis
|
Junior Member |
|
|
I have read the way the password value is supposed to be hashed, but we cannot find a way to actually reproduce that hashed value with a UserID/password combination.
You know, the Algorithm that was posted on a newsgroup back in 1993, then was in the book "Special Ops", and the article "An Assessment of the Oracle Password Hashing Algorithm" was written about it (http://www.sans.org/info/911/)?
Is this really the way it's done in Oracle?
If so... does anyone have a SQL or PL/SQL Script to actually reproduce the hash value? Many write-ups online say how easy it would be to reproduce it, but it's not posted anywhere that I can find. We have had tried many times, with no luck doing so...
Any ideas/thoughts?
[Updated on: Wed, 01 February 2006 14:13] Report message to a moderator
|
|
|