On Sun, Feb 1, 2015 at 9:59 PM, Rob Landley <[email protected]> wrote:
>
>
> On 02/01/2015 10:19 PM, Rich Felker wrote:
>> On Mon, Feb 02, 2015 at 10:33:24AM +0900, 김혜진 wrote:
>>> Hello. I share a patch of su command.
> ...
>> md5 is not better and probably worse than des. You should be using
>> bcrypt if the system supports it and otherwise sha256, sha512, or the
>> enhanced des support some systems have. These could be tried as
>> sequential fallbacks.
>
> A) I was just going to use the encryption the first entry (presumably
> root) had, given a choice. (Although again, if the android mechanism
> doesn't let you get a user list... presumably they still have uid 0 though.)

we do, but pw_passwd and pw_gecos are both always NULL.

> B) des salt is 4096 possible entries, _anything_ else lets you use more
> salt.
>
> Rob
> _______________________________________________
> Toybox mailing list
> [email protected]
> http://lists.landley.net/listinfo.cgi/toybox-landley.net
_______________________________________________
Toybox mailing list
[email protected]
http://lists.landley.net/listinfo.cgi/toybox-landley.net

Reply via email to