0 Replies Latest reply on Dec 9, 2018 9:36 AM by bgy

    PBKDF2 in Oracle 12c

    bgy

      I read in Oracle 12c Security Guide  "Oracle Database uses the 12C password version, which is based on a de-optimized algorithm that involves Password-Based Key Derivation Function (PBKDF2) and the SHA-512 cryptographic hash functions."

      Does it mean that DBMS_CRYPTO.HASH function uses PBKDF2 when specifying HASH_SH512 too?

      Is there any way for plsql developers to use this internal PBKDF2 implementation or it's internal used only for SYS.USER$?

      I use published PBKDF2 plsql implementations in fear, because it's not easy to make sure they are error free.