Search code examples
encryptionweblogicsha1weblogic-10.xsalt-cryptography

Password Encription (SHA1) by Oracle Weblogic 10.3.2

Weblogic 10.3.2 uses SHA-1 (and others) for pass encryption. For example the following password:

abcdefg

with SHA-1 encryption results:

teshjSf9GOUIvRHljjMafld8YsWTlQ4=

I have tried various websites that do SHA-! encryption, but none that result with the above answer. There is a possibility Salt is being utilized. Basically, what steps were taken to get the result.

Any help is appreciated.

Solution

  • Passwords should be salted. Hopefully even Oracle knows that. If so, you'll need the salt for a particular password.

    You'll also need to know the number of times the hash function was applied, and how the salt was combined with the password. I doubt this is considered a published interface, so WebLogic is unlikely to document this.