patchTiger UNIX security tool - Patches: patch #7186, gen_passwd_sets: recognize sha512...

 
 

You are not allowed to post comments on this tracker with your current authentification level.

patch #7186: gen_passwd_sets: recognize sha512 hashes

Submitted by:  Timo Lindfors <lindi>
Submitted on:  Wed 12 May 2010 06:34:50 AM UTC  
 
Category: NonePriority: 5 - Normal
Status: In ProgressPrivacy: Public
Assigned to: NoneOpen/Closed: Open

(Jump to the original submission Jump to the original submission)

Sat 06 Oct 2012 07:24:20 PM UTC, comment #6:

Oops.

Forgot I already posted a ticket about this =)

See https://savannah.nongnu.org/patch/?7675

pyllyukko <pyllyukko>
Sat 06 Oct 2012 07:20:36 PM UTC, comment #5:

Here's my suggestion for the password hashing detection.

The other patch is for the git HEAD, and the other one for Tiger 3.2.3.

(file #26713, file #26714)

pyllyukko <pyllyukko>
Mon 21 Nov 2011 06:28:33 PM UTC, comment #4:

Yes, I noticed that this patch dates back a while. It was included to Tiger on may 2011. Should this still be reconsidered and improved?

pyllyukko <pyllyukko>
Mon 21 Nov 2011 06:21:42 PM UTC, comment #3:

Also the patch doesn't seem to support the rounds syntax. When you've defined SHA_CRYPT_*_ROUNDS in login.defs, the hash string starts with "$6$rounds=<integer>$"...

pyllyukko <pyllyukko>
Mon 21 Nov 2011 06:16:11 PM UTC, comment #2:

I can't remember the details anymore sorry, it's been more than a year since I proposed the patch.

Timo Lindfors <lindi>
Mon 21 Nov 2011 03:57:35 PM UTC, comment #1:

Is the passwd="md5" intended, instead of passwd="sha512"? Other hashing algorithms could be added from man 3 crypt, such as 2a for Blowfish and 5 for SHA-256.

pyllyukko <pyllyukko>
Wed 12 May 2010 06:34:50 AM UTC, original submission:

http://people.redhat.com/drepper/SHA-crypt.txt

describes a scheme for using SHA512 in /etc/shadow. This is the default used in Debian GNU/Linux squeeze so we are getting a lot of false positives from tiger.

[ Kees Cook ]
* debian/local/common-password, debian/pam-configs/unix: switch from "md5"
to "sha512" as password crypt default.

-- Steve Langasek <vorlon@debian.org> Mon, 31 Aug 2009 14:21:27 -0700

-- http://packages.debian.org/changelogs/pool/main/p/pam/pam_1.1.1-3/changelog

Timo Lindfors <lindi>

 

Attached Files
file #26713:  tiger-3.2.3-gen_passwd_sets.patch added by pyllyukko (1kB - text/x-patch - Patches)
file #26714:  tiger-gen_passwd_sets.patch added by pyllyukko (3kB - text/x-patch - Patches)
file #20512:  tiger-sha512-1.patch added by lindi (3kB - text/x-patch - recognize SHA512 hashes)

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by pyllyukko (Posted a comment)
  • -unavailable- added by fgclaramonte (Updated the item)
  • -unavailable- added by lindi (Submitted the item)
  •  

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follow 4 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Sat 06 Oct 2012 07:20:36 PM UTCpyllyukkoAttached File-=>Added tiger-3.2.3-gen_passwd_sets.patch, #26713
      Attached File-=>Added tiger-gen_passwd_sets.patch, #26714
    Wed 12 May 2010 10:09:10 PM UTCfgclaramonteStatusNone=>In Progress
    Wed 12 May 2010 06:34:50 AM UTClindiAttached File-=>Added tiger-sha512-1.patch, #20512

    Back to the top


    Powered by Savane 3.1-cleanup