Re: Default password hash
This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--------------enig7DD995A299773893EAE04524
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
On 06/08/12 14:51, Dag-Erling Sm=C3=B8rgrav wrote:
> We still have MD5 as our default password hash, even though known-hash
> attacks against MD5 are relatively easy these days. We've supported
> SHA256 and SHA512 for many years now, so how about making SHA512 the
> default instead of MD5, like on most Linux distributions?
>=20
> Index: etc/login.conf
> =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
> --- etc/login.conf (revision 236616)
> +++ etc/login.conf (working copy)
> @@ -23,7 +23,7 @@
> # AND SEMANTICS'' section of getcap(3) for more escape sequences).
>=20
> default:\
> - :passwd_format=3Dmd5:\
> + :passwd_format=3Dsha512:\
> :copyright=3D/etc/COPYRIGHT:\
> :welcome=3D/etc/motd:\
> :setenv=3DMAIL=3D/var/mail/$,BLOCKSIZE=3DK,FTP_PASSIVE_MODE=3DY=
ES:\
>=20
> DES
You should also file a PR for change-requets, so it is not only in the
email list. I second a change, since I use "blf" since 2009 without
(obvious) problems.
The manpage for login.conf also needs an update. I checked this morning
and found that thye manpage doesn't even mention hashes apart from des,
md5 and blf.
Oliver
--------------enig7DD995A299773893EAE04524
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.19 (FreeBSD)
iQEcBAEBAgAGBQJP0v6OAAoJEOgBcD7A/5N8cLsH/i3nLMA3KruJ1Jv0zx/vOI0t
4pRMVVuDQvoDXoBtbAgrv3pRBMJ/EdHhgd3giAw8MB16MBvN/JO5ilBZx3ox+nCm
7Jqa5Ga9hTLZmnYv7hBbQhDVSdikOVSlGYM2SGTOowxW6xDsiYnfrDyBPmFMEJ8j
Mi3uLjH985yWlVls6qHzsnMhIRCt8J8KsxKdN6Fb2T2wz6v4ihy1x3V5JBPo1Tgu
bWiT/DKEhzpgouiyhyR4F2GP25qJZawDn6Pbt99eSpUwuCTPxqH/WEm7shxxS7+1
064zF8RHi3mPuhqjtIjoJCz+v3+qTyWYWWe++7tGu/zsshRkN7T8j77lwe3Jejs=
=Veyv
-----END PGP SIGNATURE-----
--------------enig7DD995A299773893EAE04524--
討論串 (同標題文章)
完整討論串 (本文為第 11 之 47 篇)：