From owner-freebsd-current Sun Nov 12 07:00:17 1995 Return-Path: owner-current Received: (from root@localhost) by freefall.freebsd.org (8.6.12/8.6.6) id HAA10174 for current-outgoing; Sun, 12 Nov 1995 07:00:17 -0800 Received: from Root.COM (implode.Root.COM [198.145.90.17]) by freefall.freebsd.org (8.6.12/8.6.6) with ESMTP id HAA10165 for ; Sun, 12 Nov 1995 07:00:13 -0800 Received: from corbin.Root.COM (corbin [198.145.90.50]) by Root.COM (8.6.12/8.6.5) with ESMTP id HAA02148; Sun, 12 Nov 1995 07:00:12 -0800 Received: from localhost (localhost [127.0.0.1]) by corbin.Root.COM (8.6.12/8.6.5) with SMTP id GAA02175; Sun, 12 Nov 1995 06:59:43 -0800 Message-Id: <199511121459.GAA02175@corbin.Root.COM> To: Mark Murray cc: current@freebsd.org Subject: Re: Dual-personality crypt(3)!! In-reply-to: Your message of "Sun, 12 Nov 95 15:54:46 +0200." <199511121354.PAA01842@grumble.grondar.za> From: David Greenman Reply-To: davidg@Root.COM Date: Sun, 12 Nov 1995 06:59:43 -0800 Sender: owner-current@freebsd.org Precedence: bulk >What do you think? > >I have modified the DES crypt(3) to do an MD5 (exportable-style >"encryption" if the first three characters are "$1$". (Someone (PHK?) >gave me the idea _ages_ ago.) This will allow folks to upgrade their >machines to DES encryption without having to fix all the user passwords >in master.passwd. > >If you want to test it - I'll give you a copy. I am testing it myself, >and will commit it in a day or two if no-one objects? Hmmm... what if my DES password legitimately starts with "$1$"? Wouldn't it be better to just try the DES password and if that fails (doesn't match), then try using MD5? -DG