|
Message-ID: <BLU0-SMTP106314AB1080C3033A6B717FDAB0@phx.gbl> Date: Mon, 3 Sep 2012 21:08:45 +0200 From: Frank Dittrich <frank_dittrich@...mail.com> To: john-dev@...ts.openwall.com Subject: Re: How should one select PLAINTEXT_LENGTH in a format On 08/23/2012 04:37 PM, Claudio André wrote: > How do i choose a number to use as the maximum length of a plaintext > password. 16, 24, 32, ...? > > Do you guys have a rule? Or, at least, advices? In addition to what others suggested: -IMHO it makes not much sense to support a maximum length which is larger than what the software which uses the hash format supports -it is a good idea to document the maximum plaintext length (in bytes/and or charachers) supported by the software which uses the hash format (if you are afraid that maximum length might change over time, document the release you checked) Frank
Powered by blists - more mailing lists
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.