Decrypting data from Oracle 8.1.7.4 outside the database

Question

I need to decrypt some data that is DES encrypted using Oracle 8i (8.1.7.4) and the DBMS Obfuscation Toolkit, outside of the database where it was encrypted, and I hope someone here might have some hints on how I can achieve that.
I have currently experimented with both encrypting and decrypting the same data using the obfuscation toolbit, Perl (Crypt::CBC / Crypt::EBC) and PHP (mcrypt), getting pretty much identical results from the latter. They do, however, not match what I see using the obfuscation toolkit, so the must be something here I don't quite understand.
From what I have gathered, the obfuscation toolkit encrypts the data using
* CBC
* Initialization vector consisting of 8 chr(0)'s
* Padding using spaces to achieve an encryption string of a multiple of 8 bytes.
Below I'm including 1) The PL/SQL code which is used to encrypt the data (des_encrypt_hex()), 2) the PHP code I used to test encryption. When trying to encode the same string using the obfuscation toolkit and PHP, I end up with completely different HEX values. I have also tried several variations of both this PHP code and the Perl code, using various other kinds of padding and chaining modes, but no luck.
If anyone could give me some pointers as to what I am doing wrong here, I'd be really grateful.
1)
================================================================================
FUNCTION des_encrypt
( string_in in VARCHAR2) RETURN VARCHAR2
IS
l_data varchar2(2000);
key_check_flag number;
l_encrypted_string varchar2(2000);
BEGIN
-- the key and the input data must have a length
-- divisible by eight (the key must be exactly 8 bytes long).
l_data := RPAD(string_in,(TRUNC(LENGTH(string_in)/8)+1)*8,CHR(32));
key_check_flag := mod(length(des_key_string),8);
IF key_check_flag != 0 then
RAISE_APPLICATION_ERROR(-20199,'Key should be 8 char long');
END IF;
-- Encrypt the input string
DBMS_OBFUSCATION_TOOLKIT.DESENCRYPT
( input_string => l_data,
key_string => des_key_string,
encrypted_string => l_encrypted_string);
RETURN l_encrypted_string;
END;
FUNCTION des_encrypt_hex
( string_in in VARCHAR2) RETURN VARCHAR2
IS
l_encrypted_string varchar2(2000);
BEGIN
l_encrypted_string := des_encrypt(string_in);
l_encrypted_string := rawtohex(UTL_RAW.CAST_TO_RAW(l_encrypted_string));
RETURN l_encrypted_string;
END;
===============================================================================
And the way I call it:
DECLARE
     RETURN_VALUE VARCHAR2(2000) := '-';
     STRING_IN VARCHAR2(2000) := '12345678901';
BEGIN
     RETURN_VALUE := KATALOG.PKG_PRKCRYPTO.DES_ENCRYPT_HEX(STRING_IN);
     DBMS_OUTPUT.PUT('RETURN_VALUE: ');
     DBMS_OUTPUT.PUT_LINE(RETURN_VALUE);
     DBMS_OUTPUT.PUT('STRING_IN: ');
     DBMS_OUTPUT.PUT_LINE(STRING_IN);
END;
GO
===============================================================================
2)
<?php
$space = chr(32);
$null = chr(0);
$key = "xxxxxxxx";
$input = "12345678901$space$space$space$space$space";
$iv = "$null$null$null$null$null$null$null$null";
print bin2hex(mcrypt_cbc(MCRYPT_DES, $key, $input, MCRYPT_ENCRYPT, $iv));
?>

Answer 1

I might have been unclear in my initial post, but I do have the DES encryption key used on the Oracle side. If you got that part, then my question would be: Is the Oracle 8.1.7.4 DES encryption incompatible with every other DES encryption implementation out there?