Pete Finnigan's Oracle Security Weblog

I was just emailed by Rajendra to remind me that there is a usenet post describing the Oracle password algorithm posted in 1993 by Bob Baldwin - the presumed creator. The post is titled "Oracle password encryption algorithm?" and it was posted to comp.security.misc. I first came across this post a few years ago - I think in 2001. It gives an overview of the algorithm used, design goals and pseudo code and its flow and text is coincidentally structured similarly to the post on c.d.o.s I mentioned yesterday in my post "Crack Oracle Security like a peanut!".