Subject: Re: /etc/passwd.conf
To: Jun-ichiro itojun Hagino <itojun@iijlab.net>
From: Jeremy C. Reed <reed@reedmedia.net>
List: tech-security
Date: 08/05/2003 08:03:36
On Tue, 5 Aug 2003, Jun-ichiro itojun Hagino wrote:

> 	given that DES is crackable in 3 seconds, i would like to propose the
> 	following change.  you can still use DES password entries, it only
> 	affects newly-created entries (like by passwd(1)).  what do people
> 	think?  (ypcipher is kept to "old" for backward compat)

> diff -u -r1.2 passwd.conf

Why change in the passwd.conf instead of in src/lib/libutil/passwd.c?

> +default:
> +	localcipher = blowfish,7

It seems like more operating systems support MD5; for compatibility, maybe
it should be used. Does anyone have a list of what hash/cipher
types work out of the box for various operating systems?

   Jeremy C. Reed
   http://bsd.reedmedia.net/