[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <BLU0-SMTP257BF22391AC58329C97956FD9A0@phx.gbl>
Date: Sat, 8 Jun 2013 12:55:19 +0200
From: Frank Dittrich <frank_dittrich@...mail.com>
To: john-dev@...ts.openwall.com
Subject: Re: limits within mscash2
On 06/08/2013 10:33 AM, jfoug@....net wrote:
> I am not sure why we have user name length and password length limits within the mscash2 format? I plan to remove them, but at first, only on the CPU format.
Do we know what the real limits are? Otherwise just getting rid of these
limits is probably a good idea.
May be the maximum salt length is smaller than the maximum user name
length, and the salt gets cut at the max. length? How to verify this?
If we find out the real user name / salt length and password length
limits, these should be documented somewhere.
Can we generate some real mscahs2 hashes for very long user names and
passwords and include these for --test.
Frank
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
