Mailinglist Archive: opensuse-security (520 mails)

< Previous Next >
[suse-security] Password Encryption
  • From: "Christian Röpke" <christian.roepke@xxxxxxxxxxxxx>
  • Date: Tue, 09 Jul 2002 14:21:41 +0200
  • Message-id: <20020709122217.B0DFD1465D@xxxxxxxxxxxxxx>
Hello @all,

after my installation of suse linux 8.0 yast2 ask me, whether i encrypt my passwords with DES or MD5.

i think, both of these algorithms are not secure !!!

1. DES is a encryption algorithmen, that is cracked by NSA (ca. 1990) (also by other secret services) and by the electronic frontier foundation (1999). this algorithm is NOT secret today (des-cracker : about 100.000 dollar)

2. MD5 is a hash-function, so you can't encrypt any passwords with this algorithm.

question : where is the passowrd security by suse linux ???

greetings christian röpke
__________________________________________________
Gestalte Dein eigenes Handy-Logo unter http://www.yesms.de

Ihre eMails auf dem Handy lesen - ohne Zeitverlust - 24h/Tag
eMail, FAX, SMS, VoiceMail mit http://www.directbox.com



< Previous Next >