Andrew,
> I called Oracle support they where not helpful and
> mentioned that the
> password encription algorithm was proprietory.
And this surprises you?!! "Hello? Yes, I'm
interesting in robbing your bank. Could I speak to
someone who could give me more details on how to
circumvent your security system? Hello? Hello?..."
Gotta give you an A+ for chutzpah!
To answer your question, Oracle does *not* encrypt
passwords, therefore there is no decrypting method.
Instead Oracle uses a one-way hashing algorithm and
compares the hashed values. That's why the password
has to be stored in the data dictionary when creating
a db link with a username/password.
HTH,
-- Anita
P.S. Don't expect them to give you info on their
hashing algorithm either ;)
--- Andrew Rodnite <[Email Address Removed] wrote:
> Hi All,
>
> Does anyone know of any Oracle Password cracking
> utilities i.e.
> programs similar to "Crack" or "John-the-Ripper" but
> for Oracle. I
> seem to recall sometime long ago someone posting a
> PL/SQL package
> that did something along these lines sometime ago.
>
> I called Oracle support they where not helpful and
> mentioned that the
> password encription algorithm was proprietory.
>
> In any case any pointers to any documentation as to
> what is being used
> to encrypt the password (eg. DES etc.) would be
> greatly appreciated.
>
> I will summarize.
>
> Thanks,
> Andrew T. Rodnite
> Unix and Oracle Security Analyst
> Maxim Group
> (612) 310-9080
> [Email Address Removed]
>
> --------
> Oracle documentation is here:
> http://tahiti.oracle.com/pls/tahiti/tahiti.homepage
> To unsubscribe: send a blank email to
> oracledba-[Email Address Removed] To subscribe: send a blank email to
> oracledba-[Email Address Removed] Visit the list archive:
> http://www.LAZYDBA.com/odbareadmail.pl
> Tell yer mates about http://www.farAwayJobs.com
> By using this list you agree to these
> terms:http://www.lazydba.com/legal.html
>
__________________________________________________
Do You Yahoo!?
Make international calls for as low as $.04/minute with Yahoo! Messenger
http://phonecard.yahoo.com/
Oracle LazyDBA home page