[RFC][PATCH][BZ 2100] blowfish support in libcrypt

Björn Esser bjoern.esser@gmail.com
Tue Jun 20 11:37:00 GMT 2017


Am 20.06.2017 um 13:33 schrieb Thorsten Kukuk:
> On Thu, Jun 01, Björn Esser wrote:
>
>> Look at OpenBSD, SUSE, OpenWall, etc. still using bcrypt as the default password hashing algorithm.
> At least for SUSE this is not correct.
> Blowfish is only there for compatibility reasons with existing passwords.
> With the default configuration, you cannot even create new passwords with blowfish
> since many years.
> The last time we discussed the topic with the blowfish author, he was surprised
> that there is still somebody using it.
>
>    Thorsten

What do you think about the `crypt_gensalt`-functions, then?  Those are 
actually used in YaST2, afaik…
Shall we at least add these to libcrypt, then?



More information about the Libc-alpha mailing list