Re: blf uses only 2^4 round for passwd encoding?! [Re: Default password hash]

2012-06-10 Thread emu
On 2012-06-10 19:24, RW wrote: On Mon, 11 Jun 2012 00:37:30 +0200 Oliver Pinter wrote: 16 rounds in 2012? It is not to weak?! It's hard to say. Remember that blowfish was designed as a cipher not a hash. It's designed to be fast, but to still resist known plaintext attacks at the beginning o

Re: Default password hash

2012-06-09 Thread emu
On 2012-06-09 00:01, Robert Simmons wrote: On Fri, Jun 8, 2012 at 9:06 AM, Maxim Khitrov wrote: On Fri, Jun 8, 2012 at 8:51 AM, Dag-Erling Smørgrav wrote: We still have MD5 as our default password hash, even though known-hash attacks against MD5 are relatively easy these days.  We've support