patchTiger UNIX security tool - Patches: patch #7186, gen_passwd_sets: recognize sha512...

 
 

You are not allowed to post comments on this tracker with your current authentification level.

patch #7186: gen_passwd_sets: recognize sha512 hashes

Submitted by:  Timo Lindfors <lindi>
Submitted on:  Wed May 12 06:34:50 2010  
 
Category: NonePriority: 5 - Normal
Status: In ProgressPrivacy: Public
Assigned to: NoneOpen/Closed: Open

(Jump to the original submission Jump to the original submission)

Sat Oct 6 19:24:20 2012, comment #6:

Oops.

Forgot I already posted a ticket about this =)

See https://savannah.nongnu.org/patch/?7675

pyllyukko <pyllyukko>
Sat Oct 6 19:20:36 2012, comment #5:

Here's my suggestion for the password hashing detection.

The other patch is for the git HEAD, and the other one for Tiger 3.2.3.

(file #26713, file #26714)

pyllyukko <pyllyukko>
Mon Nov 21 18:28:33 2011, comment #4:

Yes, I noticed that this patch dates back a while. It was included to Tiger on may 2011. Should this still be reconsidered and improved?

pyllyukko <pyllyukko>
Mon Nov 21 18:21:42 2011, comment #3:

Also the patch doesn't seem to support the rounds syntax. When you've defined SHA_CRYPT_*_ROUNDS in login.defs, the hash string starts with "$6$rounds=<integer>$"...

pyllyukko <pyllyukko>
Mon Nov 21 18:16:11 2011, comment #2:

I can't remember the details anymore sorry, it's been more than a year since I proposed the patch.

Timo Lindfors <lindi>
Mon Nov 21 15:57:35 2011, comment #1:

Is the passwd="md5" intended, instead of passwd="sha512"? Other hashing algorithms could be added from man 3 crypt, such as 2a for Blowfish and 5 for SHA-256.

pyllyukko <pyllyukko>
Wed May 12 06:34:50 2010, original submission:

http://people.redhat.com/drepper/SHA-crypt.txt

describes a scheme for using SHA512 in /etc/shadow. This is the default used in Debian GNU/Linux squeeze so we are getting a lot of false positives from tiger.

[ Kees Cook ]
* debian/local/common-password, debian/pam-configs/unix: switch from "md5"
to "sha512" as password crypt default.

-- Steve Langasek <vorlon@debian.org> Mon, 31 Aug 2009 14:21:27 -0700

-- http://packages.debian.org/changelogs/pool/main/p/pam/pam_1.1.1-3/changelog

Timo Lindfors <lindi>

 

Attached Files
file #26713:  tiger-3.2.3-gen_passwd_sets.patch added by pyllyukko (1kB - text/x-patch - Patches)
file #26714:  tiger-gen_passwd_sets.patch added by pyllyukko (3kB - text/x-patch - Patches)
file #20512:  tiger-sha512-1.patch added by lindi (3kB - text/x-patch - recognize SHA512 hashes)

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by pyllyukko (Posted a comment)
  • -unavailable- added by fgclaramonte (Updated the item)
  • -unavailable- added by lindi (Submitted the item)
  •  

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follow 4 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Sat Oct 6 19:20:36 2012pyllyukkoAttached File-=>Added tiger-3.2.3-gen_passwd_sets.patch, #26713
      Attached File-=>Added tiger-gen_passwd_sets.patch, #26714
    Wed May 12 22:09:10 2010fgclaramonteStatusNone=>In Progress
    Wed May 12 06:34:50 2010lindiAttached File-=>Added tiger-sha512-1.patch, #20512

    Back to the top


    Powered by Savane 3.1-cleanup