Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 16 Apr 2005 07:53:23 -0500
From:      Chris <racerx@makeworld.com>
To:        freebsd-questions@freebsd.org
Subject:   Re: Encryption of login passwords--where and how is it done?
Message-ID:  <42610AC3.4090202@makeworld.com>
In-Reply-To: <1197988274.20050416123145@wanadoo.fr>
References:  <1197988274.20050416123145@wanadoo.fr>

next in thread | previous in thread | raw e-mail | index | archive | help
Anthony Atkielski wrote:
...
> I'd like to think that a 128-byte password consisting of
> random words and special characters would be just as secure as a
> shorter, completely random password, but that's only true if FreeBSD is
> hashing the entire 128-byte string in some cryptographically secure way
> in order to produce an encrypt password that is a function of every bit
> of the plaintext password.
> 

Ummm - Somehow, somewhere, I was always taught that the longer the
password, the better. So, how can a short passward (say 10 bytes) be as
secure as a 128 byte? Let's see - would I rather walk a block for a
glass of water or walk a mile? Oh hush you people - I know what you're
gonna say - why walk when you can drive.


-- 
Best regards,
Chris

Everybody's gotta be someplace.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?42610AC3.4090202>