When describing v3 crypt, be specific as to which machine was simulated.
feedback jmc@ ok deraadt@ schwarze@

bludgeon DES support out of crypt. long live the bcrypt.

delete documentation for deleted DES interfaces

macro cleanup; kaspars at bankovskis dot net

no need for md5 xr

split crypt_checkpass off into a new file

add crypt_newhash to NAME and add an MLINK;

add new function crypt_newhash to simplify creating new hashes.
does most of the work pwd_gensalt did, but also creates the hash.
(unused yet)

update NAME and MLINKS for previous;

document crypt_checkpass

use $2b in the bcrypt example, ok tedu

remove md5crypt.
while changing things, add a crypt_checkpass wrapper that handles most of
the edge cases. (not quite ready for production, though.)
ok deraadt

right or wrong, bcrypt() is declared in pwd.h, not unistd.h

use .Mt for email addresses; from Jan Stary <hans at stare dot cz>; ok jmc@

Use the fancy .In macro for includes. From Jan Klemkow. ok jmc schwarze

this man page is mostly about password hashing now (you really don't
want to be using DES) and some of the notes about the export controls
are no longer so relevant. ok deraadt jmc

Xr encrypt(1) to give people a hint if they just want a password string

Document a known bug in the DES crypt cipher implementation which we're
not going to fix in order to stay compatible with legacy password data.
Nobody should use DES crypt anyway these days.
See http

Document a known bug in the DES crypt cipher implementation which we're
not going to fix in order to stay compatible with legacy password data.
Nobody should use DES crypt anyway these days.
See http://www.freebsd.org/security/advisories/FreeBSD-SA-12:02.crypt.asc
for details about this bug.

Discussed with deraadt and beck about half a year ago (I'm pruning Ms
from my tree).

show more ...

Update STANDARDS section for a few <stdlib.h> functions
Update SYNOPSIS for setkey() to show it's in <stdlib.h>

ok jmc@, millert@

add a RETURN VALUES section.
ok jmc@

convert to new .Dd format;

add bcrypt_gensalt, bcrypt, and md5crypt, to the .Nm list;

sync setkey prototype with reality

Be correct in our man pages when talking about NUL termination (that is,
termination with '\0') vs. null termination.
Input from krw@, jaredy@, jmc@. OK deraadt@

some of these functions are prototyped in pwd.h; ok deraadt@