Re: Default password hash, redux

2018-05-26 Thread Derek (freebsd lists)
On 18-05-23 05:40 PM, Mark Felder wrote: In light of this new article[2] I would like to rehash (pun intended) this conversation and also mention a bug report[3] we've been sitting on in some form for 12 years[4] with usable code that would make working with password hashing algorithms easier

Re: [patch] libcrypt & friends - modular crypt format support in /etc/login.conf

2015-03-13 Thread Derek (freebsd lists)
FYI - I've posted a new patch to the bug that covers all of the mentioned concerns. Looking forward to feedback! Derek ___ freebsd-security@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-security To unsubscribe, send any mai

[patch] libcrypt & friends - modular crypt format support in /etc/login.conf

2015-02-10 Thread Derek (freebsd lists)
Hello! I've been working on this for a while, and I've produced a patch that does a few things with the base system: 1. allows modular crypt to be specified as passwd_format in /etc/login.conf - this allows setting the algorithm *and rounds*, i.e. $2b$10$ for users of varying classes. -