Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 20 Sep 1999 13:18:33 -0700 (PDT)
From:      Kris Kennaway <kris@hub.freebsd.org>
To:        skalir scalar <skalir@hotmail.com>
Cc:        freebsd-security@freebsd.org, freebsd-questions@freebsd.org
Subject:   Re: MD5 vs. DES
Message-ID:  <Pine.BSF.4.10.9909201314000.26241-100000@hub.freebsd.org>
In-Reply-To: <19990920200232.66297.qmail@hotmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, 20 Sep 1999, skalir scalar wrote:

> I am looking for someinfomation or an 'HOWTO' on installing MD5
> lib's versus using DES for like the password files and the such
> like. any info would be great. thanks.

If you don't select DES libraries at install-time (or install them some
other way), then you get MD5 passwords, which are arguably "better" in
many ways.

If you do install DES libraries, you automatically get DES passwords. You
can change this with a bit of hackery in libcrypt - I have a
mostly-completed replacement to libcrypt which fixes this but it may be
some time before I can get it committed.

Moral: don't install the DES libraries unless you need them.

"Installed" means which copy is pointed to by the libcrypt.* symlinks in
/usr/lib - to switch between DES and MD5 if you have them both then you
just re-point the symlinks.

If you have DES libraries installed, your system can understand both
existing DES and MD5 passwords, but if you have MD5 then you can't use
existing DES passwords.

Kris



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.10.9909201314000.26241-100000>