From owner-freebsd-questions Mon Dec 20 2:33:50 1999 Delivered-To: freebsd-questions@freebsd.org Received: from tarial.albury.net.au (tarial.albury.NET.AU [203.15.244.17]) by hub.freebsd.org (Postfix) with ESMTP id 1E4C1152AB for ; Mon, 20 Dec 1999 02:33:46 -0800 (PST) (envelope-from nicks@tarial.albury.net.au) Received: (from nicks@localhost) by tarial.albury.net.au (8.9.3/8.9.3) id VAA14660 for freebsd-questions@freebsd.org; Mon, 20 Dec 1999 21:33:23 +1100 (EST) (envelope-from nicks) Date: Mon, 20 Dec 1999 21:33:23 +1100 From: Nick Slager To: freebsd-questions@freebsd.org Subject: MD5 - Is there life after DES? Message-ID: <19991220213323.A14566@albury.net.au> Mail-Followup-To: freebsd-questions@freebsd.org Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 1.0i X-Homer: Whoohooooooo! Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG We have several old BSDI machines with a few thousand accounts we would really like to move over to FreeBSD. The old BSDI boxen have encrypted passwords based on DES, and obviously FreeBSD by default uses the MD5 algorithm. We can quite easily bring all the BSDI users across to FreeBSD, after installing the DES port from ftp.internat.freebsd.org. Sadly, from that point on all new accounts have DES passwords, not MD5. Now DES is nice and standard, but also eminently crackable. In addition, the FreeBSD project seems to have standardized on MD5, and hence appears to be "the way of the future". So: is there a way to have both DES and MD5 support on a box, but have MD5 as the default? This would sort of be the reverse of the current situation, where MD5 and DES libs are both installed, but DES is default. We really only want DES as a legacy, "if we must" option. Any help/suggestions appreciated. Nick. -- From a Sun Microsystems bug report (#4102680): "Workaround: don't pound on the mouse like a wild monkey." To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message