Re: Brug af MD5 i c++

From: Peter Makholm (none@peter--makholm.net.lh.bsd-dk.dk)
Date: Fri 27 Dec 2002 - 11:16:14 CET 

To: bsd-dk@bsd-dk.dk
Subject: Re: Brug af MD5 i c++
From: Peter Makholm <none@peter--makholm.net.lh.bsd-dk.dk>
Date: Fri, 27 Dec 2002 11:16:14 +0100

Henrik Lund Kramshøj <none@hlk--kramse.dk.lh.bsd-dk.dk> writes:

>> Øhhh, crypt(3) laver også bare hashing og bruger enten DES, MD5 eller
>> Blowfish alt efter hvordan slat angives.

> Det salt man smider med under krypteringen af password forøger blot
> antallet
> af muligheder, og gør det derved surt(salt?) at skulle lave et

Teoretisk set korrekt, men i praksis vil crypt(3) ud fra angivelsen af
salt vælge hvilken algoritme kodeordet skal hashes med. Det kan dog
også sættes med crypt_set_format.

Fra crypt(3):

 The first argument to crypt is the data to hash (usually a password), in
 a null-terminated string. The second is the salt, in one of three forms:

   Extended If it begins with an underscore (``_'') then the DES
                Extended Format is used in interpreting both the key
                and the salt, as outlined below.
   Modular If it begins with the string ``$digit$'' then the Mod­
                ular Crypt Format is used, as outlined below.
   Traditional If neither of the above is true, it assumes the Tradi­
                tional Format, using the entire string as the salt (or
                the first portion). 

-- 
 Peter Makholm     |       Why does the entertainment industry wants us to
 peter@makholm.net |      believe that a society base on full surveillance
 http://hacking.dk |                                               is bad?
                   |                       Do they have something to hide?

This archive was generated by hypermail 2b30 : Wed 15 Nov 2006 - 18:24:26 CET