#7670: notebook -- evidently only the first 6 characters are significant???
------------------------+---------------------------------------------------
Reporter: was | Owner: was
Type: defect | Status: new
Priority: major | Milestone: sage-4.3
Component: notebook | Keywords:
Work_issues: | Author:
Upstream: N/A | Reviewer:
Merged: |
------------------------+---------------------------------------------------
Comment(by mpatel):
But [http://docs.python.org/library/crypt.html crypt] supports whatever
the OS's underlying [http://www.kernel.org/doc/man-
pages/online/pages/man3/crypt.3.html crypt(3)] supports. We could instead
do, e.g.,
{{{
#!python
import crypt as c, random as r
salt = repr(r.random())[2:]
'77551456940940877'
c.crypt('abcdefgh', '$6$' + salt + '$')
'$6$7755145694094087$uW0RGjvJG3I.BDFKIAieUTPZkD4IGI6b8RtLt1fZ9czR0TefjriLwRGPItgPyZogDFsy.YorN24v2GM4YrBwK0'
c.crypt('abcdefghi', '$6$' + salt + '$')
'$6$7755145694094087$txEQuYAJlZ.042gqmPTeLSczXBv1sI6kSjzpbmU7o89rh.Tk7qUGHhLHtL1GIrVXmUdFrQBuIefktTTptuEq31'
}}}
If Linux and Mac OS X, at least, both support SHA-512, I suggest we use it
by default. Should we generate each user's pseudo-random "salt" ---
[http://stackoverflow.com/questions/536584/non-random-salt-for-password-
hashes used to avoid clustering] --- differently than above?
--
Ticket URL: <http://trac.sagemath.org/sage_trac/ticket/7670#comment:2>
Sage <http://www.sagemath.org>
Sage: Creating a Viable Open Source Alternative to Magma, Maple, Mathematica,
and MATLAB
--
You received this message because you are subscribed to the Google Groups
"sage-trac" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to
[email protected].
For more options, visit this group at
http://groups.google.com/group/sage-trac?hl=en.
