Encryption of password & stored as encrypted

[BenjaminLim]

Hi,

Please advice what are the synthax to encrypt password using VBA & store them in the Oracle database still encrpyted.

Please advice. Thanks.

Regards
Benjamin

 

[MikeJones]

I don't know what VBA is, but I'd store any encrypted strings in a database as a RAW.

While holding it as VARCHAR2 should be fine within the Database, as the charecters may be outside of the printable charecters range you could get unstuck if exporting from one charecter set and importing to another. For this reason I'd store it as a raw.

 

[BenjaminLim]

VBA meaning Visual Basic -> any idea where I could get help.

Thanks.

Regards
Benjamin

 

[MikeJones]

There's a new package in 8.1.6 that deals with encryption, its called dbms_obfuscation. it encrypts to the DES encryption standard so is very secure, I would have thought you could make standard calls to it as you would any other Oracle SP

 

[MikeLacey]

Ben -- you can call Oracle Stored Procedures (which is what packages are, really) from VB.

Don't know what API you're using to get to the database (ODBC maybe?) but look for a method called ExecuteSQL or something like that. There's probably also something about parameters that you may find useful. Mike
michael.j.lacey@ntlworld.com
Email welcome if you're in a hurry or something -- but post in tek-tips as well please, and I will post my reply here as well.

 

[BenjaminLim]

Yes, I am using ODBC but could you adviced on the synthax to use in Visual Basic.

That is could you show some examples. Thanks.

For the Oracle, could you advice how to call the Stored Procedure. And I am using Oracle ver 7, Oracle form v4.5 & Oracle Report v2.5.

Please advice. Thanks.

Regards
Benjamin

 

[MikeJones]

Ahh, the DBMS_OBFUSCATION_TOOLKIT package is part of Oracle 8.1.6 so your a bit scuppered there. I think you would have to write your own encryption package, best search the

http://WWW for

some good algorithms....

I'd also make sure that you encryprt data into a raw rather than a varchar2, if you leave it as a varchar2 and then send it to the server you *may* find that your chr(10) chr(13) get converted to just a CHR(10) as part of the standard Windows to Unix convertion, I know I've had this problem when linking Oracle to Delphi.


Mike.

 

[karluk]

I'm glad I've never been "scuppered". It sounds painful.

 

[MikeLacey]

Scupper -- it means to sink something. You scupper a boat by opening the sea cocks and letting it sink... Mike
michael.j.lacey@ntlworld.com
Email welcome if you're in a hurry or something -- but post in tek-tips as well please, and I will post my reply here as well.

 

[BenjaminLim]

Could some kind soul please advice which

http://WWW I

can visit to get some good synthax or algorithm for this task.

Thanks.

Regards
Benjamin

 

[Kenrae]

Try

http://munitions.vipul.net/dolphin.cgi?action=render&category=0301

I don't know if there are VB libraries but it could be of some use. By the way, it's strange VB doesn't have its own cryptographic libraries, try searching one in your installation.