Results 1 to 4 of 4
  1. #1
    Join Date
    May 2006
    Posts
    13

    Unanswered: encryption of data in a field

    hi ,
    i have a table which maintains the username ,password for the application users .
    Table userinformation
    username varchar2(30),
    password varchar2(30)
    i want to make data in password column to be shown as encrypted so that even dba cannot see users password
    thank you

  2. #2
    Join Date
    Aug 2003
    Location
    Where the Surf Meets the Turf @Del Mar, CA
    Posts
    7,776
    Provided Answers: 1
    You can lead some folks to knowledge, but you can not make them think.
    The average person thinks he's above average!
    For most folks, they don't know, what they don't know.
    Good judgement comes from experience. Experience comes from bad judgement.

  3. #3
    Join Date
    Jun 2004
    Location
    Liverpool, NY USA
    Posts
    2,509
    Rather then storing it encrypted, I would store it hashed like oracle does. This would ensure that no one, including the administrator can find out the password. To test the password, simply put the entered through the same hashing process and compare the hashes.
    Bill
    You do not need a parachute to skydive. You only need a parachute to skydive twice.

  4. #4
    Join Date
    Aug 2004
    Location
    France
    Posts
    754
    Quote Originally Posted by beilstwh
    Rather then storing it encrypted, I would store it hashed like oracle does. This would ensure that no one, including the administrator can find out the password. To test the password, simply put the entered through the same hashing process and compare the hashes.
    I agree. You can use DBMS_OBFUSCATION_TOOLKIT.MD5 for this.

    HTH & regards,

    rbaraer
    ORA-000TK : No bind variable detected... Shared Pool Alert code 5 - Nuclear query ready .

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •