Tuesday, May 30, 2017

Re: password hash options

Allan Streib wrote:
> My /etc/login.conf file has "blowfish,a" as the value for localciper in
> the default class.
>
> The login.conf(5) man page sys this about the "localcipher" capability:
>
> localcipher string blowfish,a The cipher to use for
> encrypting passwords. Refer
> to crypt_newhash(3) for
> possible values.
>
>
> The crypt_newhash(3) man page mentions only this value:
>
> ``bcrypt,<rounds>''
> The bcrypt algorithm, where the value of rounds can be between 4
> and 31 and specifies the base 2 logarithm of the number of
> rounds. The special rounds value `a' automatically selects
> rounds based on system performance.
>
>
> Are "blowfish,a" and "bcrypt,a" the same?

yes, they are synonyms. the code has a bit of history, with divergent names.

No comments:

Post a Comment