| Commit message (Collapse) | Author | Age | Files | Lines |
|---|
| |
|
|
|
|
|
|
| |
consistant regarding bcrypt,a instead of blowfish,a. "blowfish"
is a historical alias which we don't need to document as firmly
as "bcrypt".
report about difficult manual page discovery from ataraxia937
ok millert
|
| |
|
|
| |
Hide bcrypt_autorounds(), prefixing with an underbar for static builds.
|
| |
|
|
| |
Delete unused 'fd' argument from internal function oldttyname()
|
| |
|
|
|
|
|
| |
99% of the world calls it.
allow just "bcrypt" without params to mean auto-tune ("bcrypt,a").
default remains 8 rounds (for now)
ok deraadt
|
| |
|
|
|
|
| |
Printing strerror() in that case will say result too large, even if rounds is
actually too small. invalid is less specific, but less incorrect.
ok millert
|
| |
|
|
| |
ok tedu@
|
| |
|
|
| |
ok deraadt miod
|
| |
|
|
|
|
|
|
|
| |
use global data. The simplest fix is to only check blowfish passwords,
and implicitly lock out DES passwords.
crypt_checkpass is currently only used in one place, passwd, to verify
the local user's password, so this is probably acceptable.
Gives people a little more time to migrate away from DES before introduing
checkpass into more places.
|
| | |
|
| |
|
|
| |
ok tedu@
|
| |
|
|
|
|
| |
pwd_gensalt origins, but a string argument works equally work and is more
friendly to consumers beyond local user accounts.
ok deraadt
|
| |
|
|
|
| |
does most of the work pwd_gensalt did, but also creates the hash.
(unused yet)
|
|
|
while changing things, add a crypt_checkpass wrapper that handles most of
the edge cases. (not quite ready for production, though.)
ok deraadt
|
