Different people identified the algorithm at the same time.

Recurity Labs GmbH (Tnx to Thorsten Schröder and Fx) did the research for us. A very interesting analysis about the 11g password algorithm can be found at the following URL:

http://www.phenoelit.net/lablog/oracle.sl


Regards

Alexander Kornbrust
www.red-database-security.com