Security question: Can you decompile a PL/SQL compiled procedure?
489164Feb 8 2006 — edited Feb 9 2006I am wondering if anyone would be able to tell me if it is possible to decompile a compiled oracle PL/SQL procedure.
Scenario:
I create some data encryption code in PL/SQL that contains an encryption key string. I compile the PL/SQL as a stored procedure and store that binary object as a BLOB in the database. If a hacker can snag a whole database that would include this BLOB and he figures out that the BLOB might contain the key, can he get access to the key by decompiling somehow the BLOB back into PL/SQL statements?
Thanks in advance!!
--
Gary Glover, CISSP
gglover@gmail.com