Different people identified the algorithm at the same time. Recurity Labs GmbH (Tnx to Thorsten Schröder and Fx) did the research for us. A very interesting analysis about the 11g password algorithm can be found at the following URL: http://www.phenoelit.net/lablog/oracle.sl Regards Alexander Kornbrust www.red-database-security.com