Re: Default password hash
This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--------------enigAB3E12C037237A173F97A2E6
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
On 06/09/12 11:28, Dimitry Andric wrote:
> On 2012-06-09 09:43, O. Hartmann wrote:
>> On 06/08/12 14:51, Dag-Erling Sm=C3=B8rgrav wrote:
>>> We still have MD5 as our default password hash, even though known-has=
h
>>> attacks against MD5 are relatively easy these days. We've supported
>>> SHA256 and SHA512 for many years now, so how about making SHA512 the
>>> default instead of MD5, like on most Linux distributions?
> ...
>> The manpage for login.conf also needs an update. I checked this mornin=
g
>> and found that thye manpage doesn't even mention hashes apart from des=
,
>> md5 and blf.
>=20
> Dag-Erling fixed this just yesterday :)
>=20
> http://svn.freebsd.org/changeset/base/236751
Great and thank you all ... :-)
--------------enigAB3E12C037237A173F97A2E6
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.19 (FreeBSD)
iQEcBAEBAgAGBQJP0yFjAAoJEOgBcD7A/5N8z1AH/jg1WlGel37h81IUqGmzCido
uWL2IJHrPfR0XGrnZ5Wi/uvs41UxMEjnNHL0wsNZ/HEOLnaVPB2y7xMlaQIzKMSu
ioUNKp/iSGWlqmP5q31QFlfTZnu7T3Z77LB/knGyvMjnqFky82zhxxbyTzCymHla
i4fu5ZHyk0O+33rG6Qk5YPAzmUQiYHXLJK8xg6ojmYjr6JvXYfq+szF/LRfyhZVR
wbHSFzV4lSFp77fXb8ICzAM9MPGdtaUUjgc2uWAqPXTPhm87pDTk3tLepF/JlJ0u
CaN7b2SE/MGwSdGIpvJFquEaK1zZNAIRMTBQ4sN5RLeLvr0GCgQfAGtsyi6je+w=
=/ick
-----END PGP SIGNATURE-----
--------------enigAB3E12C037237A173F97A2E6--
討論串 (同標題文章)