|
|
Message-ID: <20130209010239.GA19123@openwall.com>
Date: Sat, 9 Feb 2013 05:02:39 +0400
From: Solar Designer <solar@...nwall.com>
To: john-dev@...ts.openwall.com
Subject: Re: sha512crypt formats matching salt detection bug
On Fri, Feb 08, 2013 at 10:58:32PM -0200, Claudio Andr? wrote:
> We do. But we obey this restriction.
>
>
> static void * get_salt(char *ciphertext) {
> ...
> srounds = srounds < ROUNDS_MIN ?
> ROUNDS_MIN : srounds;
> out.rounds = srounds > ROUNDS_MAX ?
> ROUNDS_MAX : srounds;
> ...
> return &out;
Oh, I think we should drop that, at least for min - or we may simply set
our ROUNDS_MIN to 1. We may also print a warning.
Alexander
Powered by blists - more mailing lists
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.