Date: Sun, 12 Nov 1995 21:54:28 -0800 (PST) From: dima@FreeBSD.org (Dima Ruban) To: davidg@Root.COM Cc: mark@grondar.za, current@FreeBSD.org Subject: Re: Dual-personality crypt(3)!! Message-ID: <199511130554.VAA22831@freefall.freebsd.org> In-Reply-To: <199511121459.GAA02175@corbin.Root.COM> from "David Greenman" at Nov 12, 95 06:59:43 am
next in thread | previous in thread | raw e-mail | index | archive | help
David Greenman writes: > > >What do you think? > > > >I have modified the DES crypt(3) to do an MD5 (exportable-style > >"encryption" if the first three characters are "$1$". (Someone (PHK?) > >gave me the idea _ages_ ago.) This will allow folks to upgrade their > >machines to DES encryption without having to fix all the user passwords > >in master.passwd. > > > >If you want to test it - I'll give you a copy. I am testing it myself, > >and will commit it in a day or two if no-one objects? > > Hmmm... what if my DES password legitimately starts with "$1$"? Wouldn't it > be better to just try the DES password and if that fails (doesn't match), then > try using MD5? Maybe better to check length of crypted password? I think, password encrypted with DES has standart length and always shorter than password, encrypted with MD5 > > -DG > -- dima
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199511130554.VAA22831>