Re: Oracle hash-list?

From: James Hackett (jamespeterhackett@yahoo.co.uk)
Date: Mon Mar 21 2005 - 11:08:03 EST


Check out this article

http://international.visa.com/av/alliances/sai/alliances/pdf/Encrypting_Data_in_Oracle.pdf
or a brute forcer, of some kind within SQL
http://www.password-crackers.com/crack2.html

if DES or some description were would the salt value
be stored within the database ??? it would have to be
within the database tables some where ?????

--- Nexus <nexus@patrol.i-way.co.uk> wrote:
> Jeroen wrote:
> > Steven DeFord
> <mailto:security.willworker@gmail.com> wrote:
> >
> >
> >>1) What's the hashing algorithm?
> >
> >
> > Unknown, it's proprietary.
>
> Adding to that, it's also aggressively defended by
> Oracle - I know of
> two occasions in which a legal Cease & Desist has
> been fired off...
>
> If there are such hash related tools out there,
> don't expect anyone to
> advertise the fact.
>
> Cheers.
>



This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:54:18 EDT