Puppy Linux Discussion Forum Forum Index Puppy Linux Discussion Forum
Puppy HOME page : puppylinux.com
"THE" alternative forum : puppylinux.info
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

The time now is Sat 18 Nov 2017, 21:37
All times are UTC - 4
 Forum index » Off-Topic Area » Security
Hashing of user passwords
Post new topic   Reply to topic View previous topic :: View next topic
Page 1 of 1 [1 Post]  
Author Message
Graf_Koks

Joined: 21 Jan 2014
Posts: 35

PostPosted: Wed 12 Aug 2015, 07:03    Post subject:  Hashing of user passwords
Subject description: Something else than DES or MD5
 

Hi,

again I stumbled over the problem to set secure user passwords in 5.7.1.

Using passwd, passwords of length longer than 8 characters are accepted in general. However, only the first 8 characters are evaluated when checking the password. That is, password "12345678" would be accepted, even when password "1234567890" was set via passwd. This is a problem of the default hashing method DES.

Clearly, you can choose MD5 hashing, but MD5 is not considered to be secure anymore even when it is said, that preimage collisions are not possible yet. Unfortunately, any other hashing algorithm is not possible via passwd. Or I am to dumb to find it.

Alternatively, what I did was to create password hashes via

mkpasswd --method=<method> --salt="<salt>"

with <method> being des, md5, sha-256 or sha-512 and <salt> being some random string. The result I copied to the corresponding place in the shadow file and removed every information from the histories.

This worked. Nevertheless, is this one correct way to set passwords?

Regards,
Graf Koks
Back to top
View user's profile Send private message 
Display posts from previous:   Sort by:   
Page 1 of 1 [1 Post]  
Post new topic   Reply to topic View previous topic :: View next topic
 Forum index » Off-Topic Area » Security
Jump to:  

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001, 2005 phpBB Group
[ Time: 0.0221s ][ Queries: 11 (0.0041s) ][ GZIP on ]