一. Wrap 说明
官网的说明如下：（最好直接看官方文档）
From:http://download.oracle.com/docs/cd/E11882_01/appdev.112/e17126/wrap.htm#LNPLS1744
A PL/SQL Source Text Wrapping
You can wrap the PL/SQL source text for any of these stored PL/SQL units, thereby preventing anyone from displaying that text with the static data dictionary views *_SOURCE:
-
Package specification
-
Package body
-
Type specification
-
Type body
-
Function
-
Procedure
Note:
Wrapping text is low-assurance security. For high-assurance security, use Oracle Database Vault, described in Oracle Database Vault Administrator's Guide.A file containing wrapped PL/SQL source text is called a wrapped file. A wrapped file can be moved, backed up, or processed by SQL*Plus or the Import and Export utilities.
To produce a wrapped file, use either the PL/SQL Wrapper utility or a DBMS_DDL subprogram. The PL/SQL Wrapper utility wraps the source text of every wrappable PL/SQL unit created by a specified SQL file. The DBMS_DDL subprograms wrap the source text of single dynamically generated wrappable PL/SQL units.
Both the PL/SQL Wrapper utility and DBMS_DDL subprograms detect tokenization errors (for example, runaway strings), but not syntax or semantic errors (for example, nonexistent tables or views).
By default, the 11.2 PL/SQL compiler can use use wrapped packages that were compiled with the 9.2 PL/SQL compiler. To prevent the 11.2 PL/SQL compiler from using wrapped packages that were compiled with the 9.2 PL/SQL compiler, set the PL/SQL compilation parameter PERMIT_92_WRAP_FORMAT to FALSE. For more information about PERMIT_92_WRAP_FORMAT, see Oracle Database Reference. For more information about PL/SQL compilation parameters, see "PL/SQL Units and Compilation Parameters".
itpub上有篇文章提到了wrap 加密的原理 ：
From:http://space.itpub.net/12932950/viewspace-619808
总得来说，Oracle加密的原理就是先对源码进行lz压缩lzstr，然后对压缩数据进行SHA-1运算得到40位的加密串shstr，然后将加密串与压缩串拼接得到shstr+lzstr，然后对拼接后的字符串进行Oracle双字符转换（转换表）。最后将转换后的字符串进行base64编码，最终得到wrap的加密串。
wrap 的使用步骤如下：
（1）将我们要加密的sql 语句保存到一个sql文本里。
（2）用wrap 进行处理，指定输入的sql，即我们第一步的问题，然后指定输出的路径和文件名，默认扩展名是plb。
（3）执行我们第二部进过wrap 处理的sql，即plb文件，创建我们的对象.
The default file extension for input_file is sql. The default nameof output_file is input_file.plb. Therefore, these commands are equivalent:
wrap iname=/mydir/myfile
wrap iname=/mydir/myfile.sql oname=/mydir/myfile.plb
Thisexample specifies a different file extension for input_file and adifferent name for output_file:
wrap iname=/mydir/myfile.src oname=/yourdir/yourfile.out
示例：wrapprocedure
create or replace procedure pro_testwrap(i_number in number,o_resulte out number) is
begin
o_resulte := i_number * i_number;
end;
a000000
354
abcd
abcd
abcd
abcd
abcd
abcd
abcd
abcd
abcd
abcd
abcd
abcd
abcd
abcd
abcd
7
9d 9a
QbMvk6m4O0LBVA4+GduS35aw0QYwg5nnm7+fMr2ywFwWFpfQlqFi0T6W8lZQpV/+mYEywLIJ
pdJeqUv1U47jRPkINeKvayKo4p75a6hpzeyeQa9x3OK5QT9xhZ7YfpSPK96vWDxx4j/RPHF0
pgY/bMU=
(ps:将生成的pld文件放在oracle中执行，会有警告，不过没有关系。编译下，生成的procedure，可以正常运行 。)
示例2：sys.DBMS_DDL函数（该示例直接参考官方文档）
二. Unwrap 说明
wrap的目的是为了加密，所以Oracle并没有提供unwrap 的方法。 itpub上的一些牛人研究了一下这个问题，写了一些unwrap的代码。 具体讨论的过程，参考itpub的2个帖子：
http://www.itpub.net/thread-1154232-1-2.html
http://www.itpub.net/viewthread.php?tid=1175718&extra=page%3D1&frombbs=1
我这里贴一下unwrap 的代码：
/* Formatted on2011/8/18 12:59:54 (QP5 v5.163.1008.3004) */
CREATE OR REPLACE PACKAGE amosunwrapper
IS
FUNCTION deflate (src IN VARCHAR2)
RETURN RAW;
FUNCTION deflate (src IN VARCHAR2, quality IN NUMBER)
RETURN RAW;
FUNCTION inflate (src IN RAW)
RETURN VARCHAR2;
END;
/
CREATE OR REPLACE PACKAGE BODY amosunwrapper
IS
FUNCTION deflate (src IN VARCHAR2)
RETURN RAW
IS
BEGIN
RETURN deflate (src, 6);
END;
FUNCTION deflate (src IN VARCHAR2, quality IN NUMBER)
RETURN RAW
AS
LANGUAGE JAVA
NAME 'UNWRAPPER.Deflate( java.lang.String, int ) returnbyte[]';
FUNCTION inflate (src IN RAW)
RETURN VARCHAR2
AS
LANGUAGE JAVA
NAME 'UNWRAPPER.Inflate( byte[] ) returnjava.lang.String';
END;
/
/* Formatted on2011/8/18 13:00:16 (QP5 v5.163.1008.3004) */
CREATE OR REPLACE JAVA SOURCE NAMED UNWRAPPER
AS import java.io.*;
import java.util.zip.*;
public class UNWRAPPER
{
public static String Inflate( byte[] src )
{
try
{
ByteArrayInputStream bis = new ByteArrayInputStream( src );
InflaterInputStream iis = newInflaterInputStream( bis );
StringBuffer sb = newStringBuffer();
for( int c = iis.read(); c != -1; c = iis.read() )
{
sb.append( (char) c );
}
return sb.toString();
} catch ( Exception e )
{
}
return null;
}
public static byte[] Deflate( String src, intquality )
{
try
{
byte[] tmp = newbyte[ src.length() + 100 ];
Deflater defl = new Deflater( quality );
defl.setInput( src.getBytes( "UTF-8" ) );
defl.finish();
int cnt = defl.deflate( tmp );
byte[] res = newbyte[ cnt ];
for( int i = 0; i < cnt; i++ )
res = tmp;
return res;
} catch ( Exception e )
{
}
return null;
}
}
/
ALTER JAVA SOURCE UNWRAPPER COMPILE
/
/* Formatted on2011/8/18 13:02:57 (QP5 v5.163.1008.3004) */
--为了输出中文，要修改java过程
CREATE OR REPLACE JAVA SOURCE NAMED UNWRAPPER
AS import java.io.*;
import java.util.zip.*;
public class UNWRAPPER
{
public static String Inflate( byte[] src )
{
try
{
ByteArrayInputStream bis = newByteArrayInputStream( src );
InflaterInputStream iis = newInflaterInputStream( bis );
StringBuffer sb = newStringBuffer();
for( int c = iis.read(); c != -1; c = iis.read() )
{
sb.append( (char) c );
}
String hello = new String(sb.toString().getBytes("iso8859-1"), "GBK");
return hello;
} catch ( Exception e )
{
}
return null;
}
public static byte[] Deflate( String src, intquality )
{
try
{
byte[] tmp = newbyte[ src.length() + 100 ];
Deflater defl = new Deflater( quality );
defl.setInput( src.getBytes( "UTF-8" ) );
defl.finish();
int cnt = defl.deflate( tmp );
byte[] res = newbyte[ cnt ];
for( int i = 0; i < cnt; i++ )
res = tmp;
return res;
} catch ( Exception e )
{
}
return null;
}
}
/
ALTER JAVA SOURCE UNWRAPPER COMPILE
/
/* Formatted on2011/8/18 13:00:41 (QP5 v5.163.1008.3004) */
CREATE OR REPLACE PROCEDURE unwrap (o IN VARCHAR, n IN VARCHAR, t IN VARCHAR)
AS
vWrappedtext VARCHAR2 (32767);
vtrimtext VARCHAR2 (32767);
vChar VARCHAR2 (2);
vRepchar VARCHAR2 (2);
vLZinflatestr VARCHAR2 (32767);
nLen INTEGER;
nLoop INTEGER;
nCnt INTEGER;
code VARCHAR (512);
BEGIN
code :=
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sys.idltranslate表内容存到字符数组
vtrimtext := '';
SELECT COUNT (*)
INTO ncnt
FROM DBA_SOURCE
WHERE owner = o AND Name = n AND TYPE = t;
IF ncnt > 0 AND ncnt <= 5
THEN
FOR i IN 1 .. ncnt
LOOP
IF i = 1
THEN
SELECT RTRIM (SUBSTR (TEXT,
INSTR (TEXT,
CHR (10),
1,
20)
+ 1),
CHR (10)) --保存去掉前边20行的BASE64码正文
INTO vLZinflatestr
FROM DBA_SOURCE
WHERE owner = o AND Name = n AND TYPE = t AND line = i;
ELSE
SELECT text
INTO vLZinflatestr
FROM DBA_SOURCE
WHERE owner = o AND Name = n AND TYPE = t AND line = i;
END IF;
vtrimtext := vtrimtext || vLZinflatestr;
END LOOP;
END IF;
vtrimtext := REPLACE (vtrimtext, CHR (10), '');
nLen := LENGTH (vtrimtext) / 256;
vWrappedtext := '';
FOR i IN 0 .. nLen
LOOP
--ifi< nLen then
vWrappedtext :=
vWrappedtext
|| UTL_ENCODE.base64_decode (
UTL_RAW.cast_to_raw (SUBSTRB (vtrimtext, 256 * i + 1, 256)));
--else
--vWrappedtext:=vWrappedtext||utl_encode.base64_decode(utl_raw.cast_to_raw(substrb(vtrimtext,64*i+1 ))) ;
--endif;
--DBMS_OUTPUT.PUT_LINE(vWrappedtext);
END LOOP;
--vWrappedtext:=substr(vWrappedtext,41);
nLen := LENGTH (vWrappedtext) / 2 - 1;
vLZinflatestr := '';
FOR nLoop IN 20 .. nLen
LOOP --从第41字节开始
vChar := SUBSTRB (vWrappedtext, nLoop * 2 + 1, 2);
vLZinflatestr :=
vLZinflatestr || SUBSTR (code, TO_NUMBER (vChar, 'XX') * 2 + 1, 2); --从字符串变量匹配
--DBMS_OUTPUT.PUT_LINE(vLZinflatestr);
END LOOP;
--DBMS_OUTPUT.PUT_LINE(vLZinflatestr);
DBMS_OUTPUT.PUT_LINE (amosunwrapper.inflate (vLZinflatestr));
END;
/
黄炜弄了一个界面的Unwrap软件，下载地址：
破解(Unwrap) 10, 11G PLSQL
http://www.hellodba.com/reader.php?ID=36&lang=cn
不过Oracle 对一些对象进行加密的同时，也提供了代码，比如DBMS_ROWID包。 对于该包使用unwrap 和 直接从dba_source 查询的结果是一致的，而且dba_source 还提供了注释。
SQL>exec unwrap('SYS','DBMS_ROWID','PACKAGE BODY');
SQL>select * from dba_source where name='DBMS_ROWID'
1万+
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
