Re: Oracle hash-list?

[James Hackett <jamespeterhackett () yahoo co uk>]

Check out this article

http://international.visa.com/av/alliances/sai/alliances/pdf/Encrypting_Data_in_Oracle.pdf
or a brute forcer, of some kind within SQL
http://www.password-crackers.com/crack2.html

if DES or some description were would the salt value
be stored within the database ??? it would have to be
within the database tables some where ?????


--- Nexus <nexus () patrol i-way co uk> wrote:
> Jeroen wrote:
> > Steven DeFord
> <mailto:security.willworker () gmail com> wrote:
> > > 1)  What's the hashing algorithm?
> >
> >
> > Unknown, it's proprietary.
>
> Adding to that, it's also aggressively defended by
> Oracle - I know of 
> two occasions in which a legal Cease & Desist has
> been fired off...
>
> If there are such hash related tools out there,
> don't expect anyone to 
> advertise the fact.
>
> Cheers.