Default password encryption method.

2012-06-19 Thread ian ivy
Hello, By default FreeBSD uses MD5 to encrypt passwords. MD5 is believed to be more secure than e.g. DES but less than e.g. SHA512. Currently several major Linux distributions, uses a SHA512 mechanism. Suse Linux also offers a blowfish. Some Debian based distributions use MD5-based algorithm comp

Re: Default password encryption method.

2012-06-19 Thread Maxim Khitrov
On Tue, Jun 19, 2012 at 10:10 AM, ian ivy wrote: > Hello, > > By default FreeBSD uses MD5 to encrypt passwords. MD5 is believed to be > more secure than e.g. DES but less than e.g. SHA512. Currently several > major Linux distributions, uses a SHA512 mechanism. Suse Linux also offers > a blowfish.

FreeBSD Security Advisory FreeBSD-SA-12:04.sysret [REVISED]

2012-06-19 Thread FreeBSD Security Advisories
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 = FreeBSD-SA-12:04.sysret Security Advisory The FreeBSD Project Topic: P

Re: Default password encryption method.

2012-06-19 Thread Simon L. B. Nielsen
On Jun 19, 2012 3:16 PM, "Maxim Khitrov" wrote: > > On Tue, Jun 19, 2012 at 10:10 AM, ian ivy wrote: > > Hello, > > > > By default FreeBSD uses MD5 to encrypt passwords. MD5 is believed to be > > more secure than e.g. DES but less than e.g. SHA512. Currently several > > major Linux distributions,

Re: Update for FreeBSD Security Advisory FreeBSD-SA-12:04.sysret for 8.1

2012-06-19 Thread Steven Chamberlain
Hi, Thanks a lot of looking into this! On 18/06/12 22:37, Simon L. B. Nielsen wrote: > Note that this is ONLY for FreeBSD 8.1. Other branches are OK. Having seen the correct fix now, I'm starting to wonder if the commit to RELENG_7_4 was really okay too? http://svnweb.freebsd.org/base/releng/7.

Re: Update for FreeBSD Security Advisory FreeBSD-SA-12:04.sysret for 8.1

2012-06-19 Thread Simon L. B. Nielsen
On 19 Jun 2012, at 19:15, Steven Chamberlain wrote: > On 18/06/12 22:37, Simon L. B. Nielsen wrote: >> Note that this is ONLY for FreeBSD 8.1. Other branches are OK. > > Having seen the correct fix now, I'm starting to wonder if the commit to > RELENG_7_4 was really okay too? > > http://svnweb.

Re: Update for FreeBSD Security Advisory FreeBSD-SA-12:04.sysret for 8.1

2012-06-19 Thread John Baldwin
On Tuesday, June 19, 2012 2:15:54 pm Steven Chamberlain wrote: > Hi, > > Thanks a lot of looking into this! > > On 18/06/12 22:37, Simon L. B. Nielsen wrote: > > Note that this is ONLY for FreeBSD 8.1. Other branches are OK. > > Having seen the correct fix now, I'm starting to wonder if the comm