Optimize cryptographic signature in Oracle part 2: Finding the lost private key by manual decompilation
Introduction
🎯 Find the lost private key.
In part 1, we discussed migrating the cryptographic signature from a Java class in Oracle Database to a PL/SQL function leveraging DBMS_CRYPTO. This resulted in a 242 times speedup of the signing process.
In this post, we will explore the challenges faced in finding the correct private key and how we eventually succeeded.
A key lesson learned is to store your secrets in a safe place.
Optimize cryptographic signature in Oracle Part 1: Java out, DBMS_CRYPTO in
🎯 Customer request: Can we speed up the cryptographic signature?
✅📉 Sure. Let’s reduce the duration of the signing process by 99.96%.
How? Migrating the cryptographic signature from a Java class in Oracle Database to a PL/SQL function leveraging DBMS_CRYPTO.
Side benefit: Simpler and easier to maintain code, and recovering a lost private key, as part 2 will tell.
What is a cryptographic signature?
Here is a good definition from .Net documentation: