Skip to Main Content

Java Security

Announcement

For appeals, questions and feedback about Oracle Forums, please email oracle-forums-moderators_us@oracle.com. Technical questions should be asked in the appropriate category. Thank you!

PBKDF2 in Oracle 12c

bgyDec 9 2018

I read in Oracle 12c Security Guide  "Oracle Database uses the 12C password version, which is based on a de-optimized algorithm that involves Password-Based Key Derivation Function (PBKDF2) and the SHA-512 cryptographic hash functions."

Does it mean that DBMS_CRYPTO.HASH function uses PBKDF2 when specifying HASH_SH512 too?

Is there any way for plsql developers to use this internal PBKDF2 implementation or it's internal used only for SYS.USER$?

I use published PBKDF2 plsql implementations in fear, because it's not easy to make sure they are error free.

Comments
Post Details
Added on Dec 9 2018
0 comments
1,810 views