Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20261112135501.GI5716@brightrain.aerifal.cx>
Date: Thu, 12 Nov 2026 08:55:01 -0500
From: Rich Felker <dalias@...c.org>
To: Vincent Lefevre <vincent@...c17.net>,
	Alejandro Colomar <alx+linux-man@...nel.org>,
	Alejandro Colomar <alx@...nel.org>, linux-man@...r.kernel.org,
	libc-alpha@...rceware.org, Walter Harms <wharms@....de>,
	~hallyn/shadow@...ts.sr.ht, musl@...ts.openwall.com
Subject: Re: Re: [PATCH v1] man/man3/crypt.3: These functions accept
 many algorithms, not only DES

On Thu, Nov 12, 2026 at 02:45:16PM +0100, Vincent Lefevre wrote:
> On 2026-11-12 14:23:08 +0100, Alejandro Colomar wrote:
> > Hmm, yeah, I didn't intend to say POSIX is bad; I just wanted to let
> > people know that POSIX is irrelevant about crypt(3) these days (as Rich
> > said).  Perhaps:
> > 
> > 	The POSIX specification is significantly outdated,
> > 	and all systems extend it significantly.
> > 
> > What do you think?
> 
> OK for me.

It's not "outdated". It just does not mandate particular algorithms
but leaves these choices up to the implementation. As usual the scope
of POSIX is what applications need to know to interface with the
system, not administrative policy. This is why POSIX doesn't define
things like mount, how init works, etc. either. They are in the scope
of things that applications generally don't have to care about; only
system components do.

I do think there are changes to the POSIX crypt spec that could make
it better, like defining more errors and specifying explicitly that
salts beginning with '$' and '_' select additional
implementation-defined algorithms and settings, etc. But overall the
issue here is just a difference in expectation, not anything
inherently bad.

Rich

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.