[opensuse-factory] New FATE#312321: drop blowfish and switch to sha512 as default hash
Hi, long time ago, when glibc did only support DES crypt(), we added libxcrypt with blowfish support to have a better default hash for local accounts. Meanwhile, glibc supports sha256 and sha512, thus I filled FATE#312321 to change the default password hash to sha512, drop blowfish from YaST2 and remove libxcrypt from the distribution to avoid maintaining the same code twice. As result, you cannot create new password hashes with blowfish, but as long as we have the glibc patch, you can still login with the old hash. Thorsten -- Thorsten Kukuk, Project Manager/Release Manager SLES SUSE LINUX Products GmbH, Maxfeldstr. 5, D-90409 Nuernberg GF: Jeff Hawn, Jennifer Guild, Felix Imendörffer, HRB 16746 (AG Nürnberg) -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org
On Tue, May 10, 2011 at 8:23 AM, Thorsten Kukuk <kukuk@suse.de> wrote:
Hi,
long time ago, when glibc did only support DES crypt(), we added libxcrypt with blowfish support to have a better default hash for local accounts.
Meanwhile, glibc supports sha256 and sha512, thus I filled FATE#312321 to change the default password hash to sha512, drop blowfish from YaST2 and remove libxcrypt from the distribution to avoid maintaining the same code twice.
As result, you cannot create new password hashes with blowfish, but as long as we have the glibc patch, you can still login with the old hash.
Thorsten
I didn't know there were internal Novell only features. I assume there since I'm told it either doesn't exist or I don't have access to it. Can FATE#312321 either be opened to the community or removed from this community discussion list. Greg -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org
Greg Freemyer <greg.freemyer <at> gmail.com> writes:
Can FATE#312321 either be opened to the community or removed from this community discussion list.
Done, https://features.opensuse.org/312321 -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org
participants (3)
-
Greg Freemyer
-
Martin Vidner
-
Thorsten Kukuk