Forum Stats

  • 3,826,336 Users
  • 2,260,627 Discussions
  • 7,896,903 Comments

Discussions

PBKDF2 in Oracle 12c

bgy
bgy Member Posts: 7 Blue Ribbon

I read in Oracle 12c Security Guide  "Oracle Database uses the 12C password version, which is based on a de-optimized algorithm that involves Password-Based Key Derivation Function (PBKDF2) and the SHA-512 cryptographic hash functions."

Does it mean that DBMS_CRYPTO.HASH function uses PBKDF2 when specifying HASH_SH512 too?

Is there any way for plsql developers to use this internal PBKDF2 implementation or it's internal used only for SYS.USER$?

I use published PBKDF2 plsql implementations in fear, because it's not easy to make sure they are error free.