Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 02 May 1999 17:41:47 +0200
From:      Mark Murray <mark@grondar.za>
To:        Eivind Eklund <eivind@FreeBSD.ORG>
Cc:        freebsd-security@FreeBSD.ORG
Subject:   Re: Blowfish/Twofish 
Message-ID:  <199905021541.RAA02885@greenpeace.grondar.za>
In-Reply-To: Your message of " Sun, 02 May 1999 17:09:29 %2B0200." <19990502170929.B32819@bitbox.follo.net> 
References:  <21634.925539195@critter.freebsd.dk> <Pine.BSF.3.96.990501150648.2670B-100000@fledge.watson.org> <19990502144906.E23950@bitbox.follo.net> <199905021458.QAA02696@greenpeace.grondar.za>   <19990502170929.B32819@bitbox.follo.net> 

next in thread | previous in thread | raw e-mail | index | archive | help
Eivind Eklund wrote:
> > _Way_ overkill. A far simpler structure can easily be built by hand.
> 
> I do not understand what you mean - elaborate?  Dynamically linking in
> a new library if it is present is not very difficult - do you mean
> that OpenSSL has too complicated an API?  Or what is it you're trying
> to say?

Yes. libcrypto from OpenSSL is huge, and is hefty overkill for a
password hashing system. Apart from that, it has a name conflict
with kerberos (which also has a libcrypto).

A password hashing system just needs a couple (few?) good hashes;
nothing else.

M
--
Mark Murray
Join the anti-SPAM movement: http://www.cauce.org


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199905021541.RAA02885>