Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 14 Feb 1997 11:04:14 -0700 (MST)
From:      Nate Williams <nate@mt.sri.com>
To:        Warner Losh <imp@village.org>
Cc:        security@freebsd.org
Subject:   Re: blowfish passwords in FreeBSD
Message-ID:  <199702141804.LAA00515@rocky.mt.sri.com>
In-Reply-To: <E0vvHbl-00026f-00@rover.village.org>
References:  <E0vvHbl-00026f-00@rover.village.org>

next in thread | previous in thread | raw e-mail | index | archive | help

> OpenBSD just committed a new encryption method using blowfish.  This
> has a much larger salt space as well as a much harder to break
> encryption scheme.  Preliminary indications are that it looks really
> good.  They implemented this much like md5, but with its own code.
> 
> I think we should bring this into FreeBSD.  What do others think?

I think DES and MD5 are enough in the default distribution.  You *can*
have too much of a good thing, and it hasn't been shown that MD5 is
breakable, and DES is only for abackwards compatability.

Trying to support 3 encryption routines is loke trying to support three
init routines. :)



Nate



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199702141804.LAA00515>