Subject: Re: Password migration from Secure Ultrix to NetBSD
To: David Maxwell <david@fundy.ca>
From: Simon Burge <simonb@netbsd.org>
List: tech-security
Date: 08/03/1999 13:43:49
David Maxwell wrote:

> If you're referring to the 'type' of encrypted password I think, then
> the encrypted text is a 2 char salt, + 2-11 char strings, for a 
> total length of 23 yes?

From reading the reference I sent to the list, it's worse than that :-)
It encrypts the first 8 characters with 20 DES rounds, then the next 8
with 5 DES rounds.  You still only end up with a 2 char salt and an 11
char string.  (The normal password encrypting does 25 rounds on one 8
character string).

Simon.