Default password hash

Dag-Erling Smørgrav des at des.no
Mon Jun 11 14:00:16 UTC 2012


Mike Tancsa <mike at sentex.net> writes:
> Dag-Erling Smørgrav <des at des.no> writes:
> > Mike Tancsa <mike at sentex.net> writes:
> > > Actually, any chance of MFC'ing SHA256 and 512 in RELENG_7 ?  Its
> > > currently not there.
> > "not there" as in "not supported by crypt(3)"?
> If you put in sha256|sha512 in passwd_format, the passwd that gets
> chosen is DES, as in Data Encryption Standard, not Dag-Erling Smørgrav
> ;-)

This is non-trivial to fix, as the code that would need to be MFCed
depends on libc changes.  I'm worried about collateral damage from
MFCing those changes.

It may be possible to backport the sha2 code.

DES
-- 
Dag-Erling Smørgrav - des at des.no


More information about the freebsd-security mailing list