OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: md5 salt

markmfreebsd.org
Date: Tue Sep 16 2003 - 02:05:32 CDT


Peter Pentchev writes:
> The crypt.c and crypt-md5.c files in src/lib/libcrypt/ do not really
> pose any restrictions on the salt, short of the obvious one of its
> not containing a '$' character :)
>
> I guess going with the base64 characters would be a good bet.

Any character that does not mess up master.passwd. So ":" is also a no-no.

M
--
Mark Murray
iumop ap!sdn w,I idlaH
_______________________________________________
freebsd-securityfreebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribefreebsd.org"