meetsanc

 Profile Answers by meetsanc 

• Oct 2nd, 2008

 

For applications dealing with this highly sensitive data like passwords, Oracle provides the DBMS_OBFUSCATION_TOOLKIT PL/SQL package to encrypt and decrypt data. It includes string inputs and raw inputs. The function is limited to selected algorithms, such as the Data Encryption Standard (DES). The function prohibits making multiple passes of encryption; that is, you cannot nest encryption calls, thereby encrypting an encrypted value. Well, sometimes passwords are not stored encrypted, but rather they are stord HASHED. It can be done by using some hash value. (dbms_utility.get_hash_value)