Search Results dbms_obfuscation_toolkit




Overview
Explore in AI Chat

Overview

SYS.DBMS_OBFUSCATION_TOOLKIT is an Oracle-supplied PL/SQL package that provides cryptographic primitives for encryption, decryption, key generation, and message digesting within the Oracle database. In the Oracle E-Business Suite 12.1.1 and 12.2.2 environments, this package is a SYS-owned, VALID database object that serves as the underlying cryptography engine for applications requiring data confidentiality and integrity. It is not an EBS application object in the functional sense; rather, it is a database kernel utility that EBS components depend upon. Within EBS, the most notable consumer is the APPS.FND_CRYPTO package, which is a foundational security routine used across EBS to encrypt and decrypt sensitive values such as passwords, keys, and configuration secrets stored in the EBS schema. The package depends on SYS and the STANDARD package, confirming it is a native part of the Oracle database installation rather than a patched or custom EBS object.

Key Procedures and Functions

The ETRM metadata documents 28 procedures and functions, of which the following core cryptographic entry points are identified:

  • DESGETKEY — Generates a random key suitable for Data Encryption Standard (DES) operations.
  • DES3GETKEY — Generates a random key suitable for Triple DES (3DES) operations.
  • DESENCRYPT — Encrypts input data using the DES algorithm with a supplied key.
  • DESDECRYPT — Decrypts data previously encrypted with the DES algorithm.
  • DES3ENCRYPT — Encrypts input data using the Triple DES algorithm.
  • DES3DECRYPT — Decrypts data previously encrypted with Triple DES.
  • MD5 — Produces an MD5 message digest (hash) of the supplied input for integrity and checksum purposes.

The package exposes these routines both as procedures and functions, accounting for the larger total of 28 documented subprograms. No parameter lists are documented in the ETRM metadata and none should be assumed without direct inspection of the package specification.

Tables Accessed

The ETRM metadata does not document any tables referenced through APPS synonyms for this package. This is consistent with its nature: DBMS_OBFUSCATION_TOOLKIT is a stateless cryptographic utility that operates purely on in-memory data passed to its subprograms. It reads and writes no application tables and maintains no persistent state. Any persistence of encrypted values is the responsibility of the calling code, such as FND_CRYPTO, which stores encrypted secrets in EBS configuration tables on behalf of applications.

Usage Notes

DBMS_OBFUSCATION_TOOLKIT is typically invoked indirectly rather than directly by EBS functionality. The metadata confirms it is referenced by APPS.FND_CRYPTO, ODM.OP_COMMON, and the PUBLIC synonym DBMS_OBFUSCATION_TOOLKIT. In practice, EBS concurrent programs, Oracle Forms, and custom PL/SQL code that must encrypt or decrypt sensitive data generally call FND_CRYPTO, which in turn delegates to this package. Direct invocation occurs in custom database code where developers require DES, 3DES, or MD5 operations. Because Oracle has deprecated DBMS_OBFUSCATION_TOOLKIT in favor of the DBMS_CRYPTO package in later database releases, implementations on EBS 12.1.1 and 12.2.2 remain dependent on the legacy toolkit shipped with their certified database versions. Administrators should treat the package as a core SYS component and avoid modifying it.