Re: Default password hash

Mike Tancsa <[e-mail]> writes:
> Dag-Erling Sm=C3=B8rgrav <[e-mail]> writes:
> > Mike Tancsa <[e-mail]> writes:
> > > Actually, any chance of MFC'ing SHA256 and 512 in RELENG_7 ?  Its
> > > currently not there.
> > "not there" as in "not supported by crypt(3)"?
> If you put in sha256|sha512 in passwd_format, the passwd that gets
> chosen is DES, as in Data Encryption Standard, not Dag-Erling Sm=C3=B8rgr=
av
> ;-)

This is non-trivial to fix, as the code that would need to be MFCed
depends on libc changes.  I'm worried about collateral damage from
MFCing those changes.

It may be possible to backport the sha2 code.

DES
--=20
Dag-Erling Sm=C3=B8rgrav - [e-mail]
_______________________________________________
[e-mail] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "[e-mail]"