[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <avThPiJtvcO-eHiR@devuan>
Date: Wed, 11 Nov 2026 22:43:17 +0100
From: Alejandro Colomar <alx@...nel.org>
To: Rich Felker <dalias@...c.org>
Cc: Alejandro Colomar <alx+linux-man@...nel.org>,
"Serge E. Hallyn" <serge@...lyn.com>, linux-man@...r.kernel.org, libc-alpha@...rceware.org,
Walter Harms <wharms@....de>, ~hallyn/shadow@...ts.sr.ht, musl@...ts.openwall.com
Subject: Re: Re: [PATCH v1] man/man3/crypt.3: These functions accept
many algorithms, not only DES
Hi Rich,
> Date: 2026-11-11 16:13:13-0500
> From: Rich Felker <dalias@...c.org>
>
[...]
>
> I'm not sure where you're getting this from. All implementations of
> the same password hash function need to produce the same result, or
> user credentials would not be portable between different ones. And a
> password hash that does not use any salt would not be fit for purpose.
>
> In musl's crypt_sha512.c, the salt is isolated from the setting string
> in lines 262-266 and used in the sha512_update operations that follow.
I'm not a cryptographer, so my reading of that code isn't very good.
Thanks for correcting me!
Have a lovely night!
Alex
>
> Rich
--
<https://www.alejandro-colomar.es>
Download attachment "signature.asc" of type "application/pgp-signature" (834 bytes)
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
