summaryrefslogtreecommitdiff
path: root/src/lib
diff options
context:
space:
mode:
authorstsp <>2012-11-30 13:51:11 +0000
committerstsp <>2012-11-30 13:51:11 +0000
commit6d6f692b7e1f31d605508c43f33d8e374326a67c (patch)
tree4b192238fc41264f8e262ec6f12a8ff9e27b5d0e /src/lib
parent0e46258b9990cfb456367b54a1dc872870086bd3 (diff)
downloadopenbsd-6d6f692b7e1f31d605508c43f33d8e374326a67c.tar.gz
openbsd-6d6f692b7e1f31d605508c43f33d8e374326a67c.tar.bz2
openbsd-6d6f692b7e1f31d605508c43f33d8e374326a67c.zip
Document a known bug in the DES crypt cipher implementation which we're
not going to fix in order to stay compatible with legacy password data. Nobody should use DES crypt anyway these days. See http://www.freebsd.org/security/advisories/FreeBSD-SA-12:02.crypt.asc for details about this bug. Discussed with deraadt and beck about half a year ago (I'm pruning Ms from my tree).
Diffstat (limited to 'src/lib')
-rw-r--r--src/lib/libc/crypt/crypt.38
1 files changed, 6 insertions, 2 deletions
diff --git a/src/lib/libc/crypt/crypt.3 b/src/lib/libc/crypt/crypt.3
index 8415f28b9b..3d9785fca9 100644
--- a/src/lib/libc/crypt/crypt.3
+++ b/src/lib/libc/crypt/crypt.3
@@ -1,4 +1,4 @@
1.\" $OpenBSD: crypt.3,v 1.28 2012/06/02 00:14:16 guenther Exp $ 1.\" $OpenBSD: crypt.3,v 1.29 2012/11/30 13:51:11 stsp Exp $
2.\" 2.\"
3.\" FreeSec: libcrypt 3.\" FreeSec: libcrypt
4.\" 4.\"
@@ -31,7 +31,7 @@
31.\" 31.\"
32.\" Manual page, using -mandoc macros 32.\" Manual page, using -mandoc macros
33.\" 33.\"
34.Dd $Mdocdate: June 2 2012 $ 34.Dd $Mdocdate: November 30 2012 $
35.Dt CRYPT 3 35.Dt CRYPT 3
36.Os 36.Os
37.Sh NAME 37.Sh NAME
@@ -323,3 +323,7 @@ The
323function returns a pointer to static data, and subsequent calls to 323function returns a pointer to static data, and subsequent calls to
324.Fn crypt 324.Fn crypt
325will modify the same object. 325will modify the same object.
326.Pp
327With DES hashing, passwords containing the byte 0x80 use less key entropy
328than other passwords.
329This is an implementation bug, not a bug in the DES cipher.