Re: passwd hashing algorithm
maquis (maquis@netcom.com)
Fri, 14 Apr 1995 07:18:49 -0700 (PDT)
On 13 Apr 1995, Louis Taber wrote:
> >* David Faron Stagner (stagda@sys1.ic.ncs.com) writes
>
> >I'm with der Mouse on this... the current state of crypt() and
> >password hashing in unix is inexcusable.
> ..... stuff removed
Agreed. Personally, I am wondering when Unix will get overhauled so that
these recurring holes (sendmail, crypt<>, etc) will be brought to a
higher level of perfection. Regarding crypt() I would think a one-way
mechanism is the answer, versus having keys that are left around the system.
rf