Default password encryption method.

2012-06-19 Thread ian ivy
Hello, By default FreeBSD uses MD5 to encrypt passwords. MD5 is believed to be more secure than e.g. DES but less than e.g. SHA512. Currently several major Linux distributions, uses a SHA512 mechanism. Suse Linux also offers a blowfish. Some Debian based distributions use MD5-based algorithm

FreeBSD Security Advisory FreeBSD-SA-12:04.sysret [REVISED]

2012-06-19 Thread FreeBSD Security Advisories
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 = FreeBSD-SA-12:04.sysret Security Advisory The FreeBSD Project Topic:

Re: Default password encryption method.

2012-06-19 Thread Simon L. B. Nielsen
On Jun 19, 2012 3:16 PM, Maxim Khitrov m...@mxcrypt.com wrote: On Tue, Jun 19, 2012 at 10:10 AM, ian ivy sidetripp...@gmail.com wrote: Hello, By default FreeBSD uses MD5 to encrypt passwords. MD5 is believed to be more secure than e.g. DES but less than e.g. SHA512. Currently several

Re: Update for FreeBSD Security Advisory FreeBSD-SA-12:04.sysret for 8.1

2012-06-19 Thread Simon L. B. Nielsen
On 19 Jun 2012, at 19:15, Steven Chamberlain wrote: On 18/06/12 22:37, Simon L. B. Nielsen wrote: Note that this is ONLY for FreeBSD 8.1. Other branches are OK. Having seen the correct fix now, I'm starting to wonder if the commit to RELENG_7_4 was really okay too?