Date: Mon, 6 Jan 2014 15:51:56 -0500 From: "A.J. Kehoe IV (Nanoman)" <nanoman@nanoman.ca> To: FreeBSD-current@FreeBSD.org Subject: Re: Better Password Hashes Message-ID: <20140106205156.GD4903@nanocomputer.nanoman.ca> In-Reply-To: <20130930181611.GA90404@nanocomputer.nanoman.ca> References: <20130930181611.GA90404@nanocomputer.nanoman.ca>
next in thread | previous in thread | raw e-mail | index | archive | help
[-- Attachment #1 --] A.J. Kehoe IV (Nanoman) wrote: [...] >http://www.freebsd.org/cgi/query-pr.cgi?pr=182518 [...] It seems that pam_unix.c isn't the only file that needs patching. Notice pw_pwcrypt and pw_password in pw_user.c: http://svnweb.freebsd.org/base/head/usr.sbin/pw/pw_user.c?view=markup Rather than copy Derek's code into pw_user.c, we're thinking that this would be a better solution: 1. Copy Derek's code into libcrypt. 2. Modify Derek's patches to reference libcrypt instead. 3. Write a patch for pw_user.c to reference libcrypt. It's entirely possible that there are other utilities and libraries that also need to be patched. Rather than use the copy-pasta method that appears to have been used between pam_unix.c and pw_user.c, everything can simply reference libcrypt. Before we begin, does anyone have any comments? -- A.J. Kehoe IV (Nanoman) | /"\ ASCII Ribbon Campaign Nanoman's Company | \ / - No HTML/RTF in E-mail E-mail: nanoman@nanoman.ca | X - No proprietary attachments WWW: http://www.nanoman.ca/ | / \ - Respect for open standards [-- Attachment #2 --] 0P *H A0=1 0 + 0 *H 0w0_ [0 *H 0y10U Root CA1 0 U http://www.cacert.org1"0 UCA Cert Signing Authority1!0 *H support@cacert.org0 130906235134Z 140305235134Z0=10UCAcert WoT User1!0 *H nanoman@nanoman.ca0"0 *H 0 VDj @[H}K4٪:CJyckXmi ~F6 x1JoeHQL`w& .PH"w}|oѬݘ2r6ڛ? p .yaw Nc^ʽhNmHo$lsB1hXy XU ş kք))RnZg_Îhc$u^SϏdmoA#k>x;As B0>0 U 0 0V `HB IGTo get your own certificate for FREE head over to http://www.CAcert.org0U 0@U %907++ +7 +7 `HB02+&0$0"+0http://ocsp.cacert.org01U *0(0&$" http://crl.cacert.org/revoke.crl0 U 0nanoman@nanoman.ca0 *H HO7췣=F*Mk-r |#,s0y99oZ,q~YI}s.P !_Nǘl[Һ*u4{q\cj!RtjO _ڦrʳ)fjh)c@7BtK/]*JԁǞ8ݸ{Pu[~71\йw;\ \M0fvm}`]9vgA6+1l}aAo u*у\gJ%=OF7M!i?@DG |pM,B0JC|u=a6;y? $H&Mj7+h4@Pi@2 +[J/$ 3ObxC;.(v9 +7[[JNdVJ8N`^ʛDɲi_٭ىeRkCS ^s _63o'$~D$d{}>z ;M0=0% 0 *H 0y10U Root CA1 0 U http://www.cacert.org1"0 UCA Cert Signing Authority1!0 *H support@cacert.org0 030330122949Z 330329122949Z0y10U Root CA1 0 U http://www.cacert.org1"0 UCA Cert Signing Authority1!0 *H support@cacert.org0"0 *H 0 "F}6(P3@K;f?1k6|Nw6A Fs`n~XdͰE cg ҿ>L5]l!ޞ ٺf27rXɎ^> l[df*zKSy{/ a+~MVڒDA X`efD˔B~ ehQ Wkzr%[ 2H.0B%k?:SHҶ4 zX+[8]fɘמtq r`o34v>$z oE8GAJ. Yתғ}h.KX/ꕧTۋQ"þ,x ӊ/?Qe!eE |ALO)!3 u Qw i" Ṕ1{8h[+~_rLK Wʑ u!7c g>FOp gYͺbA )d)B"xC QKZZqs 00 U 2Ұ:90U #02Ұ:9ѡ}{0y10U Root CA1 0 U http://www.cacert.org1"0 UCA Cert Signing Authority1!0 *H support@cacert.org 0U 002U +0)0'%#!https://www.cacert.org/revoke.crl00 `HB#!https://www.cacert.org/revoke.crl04 `HB'%http://www.cacert.org/index.php?id=100V `HB IGTo get your own certificate for FREE head over to http://www.cacert.org0 *H (\5 ojhX>ÐZ`CpbgX 06;Htq>+h4b@F;S(fSM];`yi;eƁ\MU 7paj|.T>O!܂EMs<evj7$ NmQďʖmC0e';{CCcCh"{Z>7;N˛͚۲p-JذoEH3<2*T#Gdzq c~/ܟ+H%B>Wiw4 Kʠ ƌ27hs_QIS6 Ly:u pg/y= s og/ ${H5)@`ᖆPzY؏! ς;kV#lH<N/ So.t:c¦D l$pG.Բ d$ ܡ5ԼU.}UZ֓v%sLC1\0X00y10U Root CA1 0 U http://www.cacert.org1"0 UCA Cert Signing Authority1!0 *H support@cacert.org [0 + 0 *H 1 *H 0 *H 1 140106205156Z0# *H 1)4m =ı= 0R *H 1E0C0 *H 0*H 0 *H @0+0 *H (0 *H >Fm ySu^vcfS[*LAQV;ĹGRW&MSXXZjiF5!ȧ5+ɶ֡+.D 9 "W1AڮƎQs`Q `a%v8K "9XrMLZU`Q0z]0- 8ZY `۫BOb)/ϔ *4(@H$$ yY@4/*` ٸCyM
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20140106205156.GD4903>