patchTiger UNIX security tool - Patches: patch #7186, gen_passwd_sets: recognize sha512...

 
 

You are not allowed to post comments on this tracker with your current authentication level.

patch #7186: gen_passwd_sets: recognize sha512 hashes

Submitter:  Timo Lindfors <lindi>
Submitted:  Wed 12 May 2010 06:34:50 AM UTC
   
 
Category:  None Priority:  5 - Normal
Status:  In Progress Privacy:  Public
Assigned to:  None Open/Closed:  Open

Jump to the original submission

Sat 06 Oct 2012 07:24:20 PM UTC, comment #6: 

Oops.

Forgot I already posted a ticket about this =)

See https://savannah.nongnu.org/patch/?7675

 pyllyukko <pyllyukko>
Sat 06 Oct 2012 07:20:36 PM UTC, comment #5: 

Here's my suggestion for the password hashing detection.

The other patch is for the git HEAD, and the other one for Tiger 3.2.3.

(file #26713, file #26714)

 pyllyukko <pyllyukko>
Mon 21 Nov 2011 06:28:33 PM UTC, comment #4: 

Yes, I noticed that this patch dates back a while. It was included to Tiger on may 2011. Should this still be reconsidered and improved?

 pyllyukko <pyllyukko>
Mon 21 Nov 2011 06:21:42 PM UTC, comment #3: 

Also the patch doesn't seem to support the rounds syntax. When you've defined SHA_CRYPT_*_ROUNDS in login.defs, the hash string starts with "$6$rounds=<integer>$"...

 pyllyukko <pyllyukko>
Mon 21 Nov 2011 06:16:11 PM UTC, comment #2: 

I can't remember the details anymore sorry, it's been more than a year since I proposed the patch.

Timo Lindfors <lindi>
Mon 21 Nov 2011 03:57:35 PM UTC, comment #1: 

Is the passwd="md5" intended, instead of passwd="sha512"? Other hashing algorithms could be added from man 3 crypt, such as 2a for Blowfish and 5 for SHA-256.

 pyllyukko <pyllyukko>
Wed 12 May 2010 06:34:50 AM UTC, original submission:  

http://people.redhat.com/drepper/SHA-crypt.txt

describes a scheme for using SHA512 in /etc/shadow. This is the default used in Debian GNU/Linux squeeze so we are getting a lot of false positives from tiger.

[ Kees Cook ]
  * debian/local/common-password, debian/pam-configs/unix: switch from "md5"
    to "sha512" as password crypt default.

 -- Steve Langasek <vorlon@debian.org>  Mon, 31 Aug 2009 14:21:27 -0700

-- http://packages.debian.org/changelogs/pool/main/p/pam/pam_1.1.1-3/changelog

Timo Lindfors <lindi>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attached Files
file #26713:  tiger-3.2.3-gen_passwd_sets.patch added by pyllyukko (1KiB - text/x-patch - Patches)
file #26714:  tiger-gen_passwd_sets.patch added by pyllyukko (3KiB - text/x-patch - Patches)
file #20512:  tiger-sha512-1.patch added by lindi (3KiB - text/x-patch - recognize SHA512 hashes)

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by pyllyukko (Posted a comment)
  • -email is unavailable- added by fgclaramonte (Updated the item)
  • -email is unavailable- added by lindi (Submitted the item)

    •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

     

    Follow 4 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2012-10-06 pyllyukko Attached File- Added tiger-3.2.3-gen_passwd_sets.patch, #26713
        Attached File- Added tiger-gen_passwd_sets.patch, #26714
    2010-05-12 fgclaramonte StatusNone In Progress
    2010-05-12 lindi Attached File- Added tiger-sha512-1.patch, #20512

    Back to the top

    Copyright © 2025 Free Software Foundation, Inc.
    Verbatim copying and distribution of this entire article is permitted in any medium, provided this notice is preserved.
    The Levitating, Meditating, Flute-playing Gnu logo is a GNU GPL'ed image provided by the Nevrax Design Team.
    Page source code

    Powered by Savane 3.14-04e1.
    Corresponding source code