History log of /dflybsd-src/lib/libc/string/mempcpy.c (Results 1 – 1 of 1)
Revision Date Author Comments
# d8ee3b5d 20-Jan-2012 Samuel J. Greear <sjg@thesjg.com>

crypt(3) - Switch SHA256/512 to the Linux implementation

* The existing SHA backends have been shown to be more susceptible to brute-
force attacks than we would prefer --
http://www.openwall.co

crypt(3) - Switch SHA256/512 to the Linux implementation

* The existing SHA backends have been shown to be more susceptible to brute-
force attacks than we would prefer --
http://www.openwall.com/lists/oss-security/2012/01/16/2

* Bring in the reference implementation used in Linux, code is in the public
domain.

* Add required (standard) functions mempcpy and stpcpy.

* Change default for future installs to SHA512, this is the default on at
least archlinux and fedora.

* Add some minor hacks to libcrypt/crypt.c to ensure that
a) All existing passwords continue to work
b) All future passwords will be more secure with no changes required

* To update passwords to the new format use passwd(1) for each user, and to
change your default password type to SHA512 (default for new installations)
change the passwd_format setting under default to "sha512".

show more ...