Tuesday, May 30, 2017

password hash options

My /etc/login.conf file has "blowfish,a" as the value for localciper in
the default class.

The login.conf(5) man page sys this about the "localcipher" capability:

localcipher string blowfish,a The cipher to use for
encrypting passwords. Refer
to crypt_newhash(3) for
possible values.


The crypt_newhash(3) man page mentions only this value:

``bcrypt,<rounds>''
The bcrypt algorithm, where the value of rounds can be between 4
and 31 and specifies the base 2 logarithm of the number of
rounds. The special rounds value `a' automatically selects
rounds based on system performance.


Are "blowfish,a" and "bcrypt,a" the same?

Allan

No comments:

Post a Comment