Auditing an Oracle database for security issues is very important. PeteFinnigan.com provides all of the information and tools that you will need Click here for details of PeteFinnigan.com Limited's detailed Oracle database security audit service Click here for details of PeteFinnigan.com Limited's Oracle Security Training Courses
There are 27 visitors online    

Pete Finnigan's Oracle security weblog


Home » Archives » January 2007 » Oracle password crackers just got faster

[Previous entry: "Secure Passwords Keep You Safer"] [Next entry: "checkpwd has been updated to 1.22 and is around 30% faster"]

Oracle password crackers just got faster

January 22nd, 2007 by Pete

Post to del.icio.us   Post to Furl   Digg!

Alex made me aware of a nice article on Intel's work on tuning the already fast openssl cryptographic libraries. The paper is written by Muneesh Nagpal, server applications engineer, Core Software Division; Gururaj Nagendra, senior software engineer and architect, Software Products Division, SSG; and Alexey Omeltchenko, software engineer, Software Enabling Division, Intel Corp.

The article is titled "Boosting cryptography performance with Intel libraries" and a preview is here:

"This simple optimization walk-through improves an already-optimized sample OpenSSL application's performance by 35 percent using IntelĀ® cryptography library functions. With the increase in e-commerce and other transactions in enterprise applications, the demand for higher-performing, secure, and scalable communications is on the rise. From a hardware perspective, as the communication load increases, load balancing is typically accomplished by adding more processors."

Why is this of interest to us Oracle security types? - well because the current crop of Oracle password crackers are cracking DES and some like orabf and checkpwd use openssl. This means that Oracle password crackers will run around 40% faster simply by recompiling or relinking.


January 2007
SMTWTFS
 123456
78910111213
14151617181920
21222324252627
28293031   

This is the weblog for Pete Finnigan. Pete works in the area of Oracle security and he specialises in auditing Oracle databases for security issues. This weblog is aimed squarely at those interested in the security of their Oracle databases.

Weblog Home
Weblog Archives

Oracle Security Step-by-Step (Version 2.0)

Home
Oracle Security Tools page
Oracle security papers
Oracle Security alerts

Web Development
SQL Server Security

RSS 1.0 FEED
RSS 2.0 FEED
Atom 0.3 FEED
Powered by gm-rss 2.0.0


Valid XHTML 1.0!