Usenet 1994 January/usenetsourcesnewsgroupsinfomagicjanuary1994.iso/sources/std_unix/volume.28/text0013.txt

Text File | 1992-08-17 | 1.1 KB | 24 lines

Submitted-by: [e-mail] (John F. Haugh II)

I am looking for information regarding extended length (or function, for
that matter) passwords.  The Shadow Password Suite I wrote uses simple
catentation for 16 character passwords - the first 13 characters from
crypt() have the next 11 character (no salt ...) appended to the end to
make a 24 character encrypted string.  I am also considering adding a
function that allows an administrator to specify an alternate
authentication mechanism, for example, to use one time pads or some
challenge/response scam.  For that I am thinking of using an @ before the
program name in place of the encrypted password.

Now, before I run off and re-invent someones wheel, are there any RFCs or
impending NIST/ISO standards for such things?
--
John F. Haugh II                   | Vida en La Republica de Tejas:
Ma Bell: [phone]            |  Gov. Ann Richards after shooting her
UUCP: ...!cs.utexas.edu!rpp386!jfh |  first wild turkey of the season on
Domain: [e-mail]      |  hunting deer: "[It's] as boring as dirt."


Volume-Number: Volume 28, Number 14