Trevor Vaughan wrote:

> Interesting, this still seems...odd, but it should work, though I'm
> still skeptical of using a cipher versus a true one-way hash.

The normal Unix crypt(3) method uses a variant of DES to make a one-way
hash.  Basically, you use the password as the key to encrypt a constant
string.  That's been used for 30 years or so, and the only real weakness
I can recall hearing about it is that the key is too short (8 characters,
and if you use anything longer, only the 8 first characters are used).


        /Bellman

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to