Hi Hongxu -
Nothing to do with any other CA product. Only to do with is it possible to to provide an attribute in CA Directory, much like the setting (default in later versions) for userPassword (password-storage), whereby the attribute can be hashed. An encryption method would also be acceptable, although don't need to be that intensive as I believe this would require keys and exchanges, etc, that we really don't want/need to do at this time.
Basically all I really need to do is provide a means whereby the Directory server will see that the attribute is set to be hashed, so that an application can send an attribute to the Directory server and the server can hash the attribute and compare to the stored value.
Hope this helps clarify. BTW, it is also my belief that CA Directory does not have this capability.
Thanks,
Steve