On 02/01/2015 10:19 PM, Rich Felker wrote:
> On Mon, Feb 02, 2015 at 10:33:24AM +0900, 김혜진 wrote:
>> Hello. I share a patch of su command.
...
> md5 is not better and probably worse than des. You should be using
> bcrypt if the system supports it and otherwise sha256, sha512, or the
> enhanced des support some systems have. These could be tried as
> sequential fallbacks.

A) I was just going to use the encryption the first entry (presumably
root) had, given a choice. (Although again, if the android mechanism
doesn't let you get a user list... presumably they still have uid 0 though.)

B) des salt is 4096 possible entries, _anything_ else lets you use more
salt.

Rob
_______________________________________________
Toybox mailing list
[email protected]
http://lists.landley.net/listinfo.cgi/toybox-landley.net

Reply via email to