[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <c696122b-8d75-4e29-9088-9599c3906f5a@gmail.com>
Date: Tue, 2 Jun 2026 22:50:00 +0900
From: Seo Suchan <tjtncks@...il.com>
To: musl@...ts.openwall.com
Subject: musl crypt() fallback to DES for unknown hash algorithm
I noticed busybox 1.38 added yescrypt support and assumed everything
will support this, but as musl didn't have and it fallback every hash
identifier it doesn't know into des, makeing des password hash salted
with $y:
not sure how crypto api should work but this feels like a footgun and
it'd better reject |any hash started with $ but musl doesn't about
crypt_r() should return error. man crypt.3 suggest it'd set errorno to
EINVAl and return invalid hash starting with *|
Content of type "text/html" skipped
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
