Home » RDBMS Server » Security » Hash Value for Passwords Stored in Oracle
icon5.gif  Hash Value for Passwords Stored in Oracle [message #157329] Wed, 01 February 2006 11:18
vthokiejjw
Messages: 1
Registered: February 2006
Location: Indianapolis
Junior Member
I have read the way the password value is supposed to be hashed, but we cannot find a way to actually reproduce that hashed value with a UserID/password combination.

You know, the Algorithm that was posted on a newsgroup back in 1993, then was in the book "Special Ops", and the article "An Assessment of the Oracle Password Hashing Algorithm" was written about it (http://www.sans.org/info/911/)?

Is this really the way it's done in Oracle?

If so... does anyone have a SQL or PL/SQL Script to actually reproduce the hash value? Many write-ups online say how easy it would be to reproduce it, but it's not posted anywhere that I can find. We have had tried many times, with no luck doing so...

Any ideas/thoughts?

[Updated on: Wed, 01 February 2006 14:13]

Report message to a moderator

Previous Topic: Last Time User Login
Next Topic: Locked Accounts
Goto Forum:
  


Current Time: Thu Mar 28 07:07:50 CDT 2024