summaryrefslogtreecommitdiff
path: root/README
diff options
context:
space:
mode:
authorZack Weinberg <zackw@panix.com>2017-09-19 11:55:28 -0400
committerZack Weinberg <zackw@panix.com>2017-09-19 11:55:28 -0400
commitca75f3f979c799b9eeaf41fc2c21d767f1d17d00 (patch)
tree2c7c03269f51da773cd712aae6aea384c958fb08 /README
parent8b33f966479449b0288de351d7df66f68d7820b0 (diff)
downloadlibxcrypt-ca75f3f979c799b9eeaf41fc2c21d767f1d17d00.tar.gz
libxcrypt-ca75f3f979c799b9eeaf41fc2c21d767f1d17d00.tar.bz2
libxcrypt-ca75f3f979c799b9eeaf41fc2c21d767f1d17d00.zip
Remove the bigcrypt() function.
This function forces the use of a DES-based password hash which is unacceptably weak by modern standards -- its _only_ advantage over the original DES hash is that it does not truncate a password to its leading eight characters. It was already not exposed for use by new code, and now I have discovered that it never actually shipped in any Linux distribution's libcrypt, so there is no point including it at all. (It did exist in some proprietary Unixes of the System V lineage, and codesearch.debian.net finds a number of uses of it, but always under conditionals which exclude Linux.) This does not remove support for the bigcrypt hash *format*. That is, as long as this library is not configured with --disable-weak-hashes, the regular crypt* entry points will still be able to _check_ a password against a bigcrypt-format hash. If you have some particular reason why you must generate a new bigcrypt-format hash, you can do this with the regular crypt* entry points by padding a traditional DES two-character salt on the right with fourteen dots; see test-crypt-des.c for an example. * crypt-static.c (bigcrypt): Remove function. * crypt-des.c: Remove mentions of the bigcrypt function and clarify commentary. (crypt_des_big_rn): Make static. * crypt-private.h: Remove prototype for crypt_des_big_rn. * configure.ac, README, crypt-symbols.h, libcrypt.map.in: Remove all mentions of the bigcrypt function. * test-bigcrypt.c: Remove file. * Makefile.am: Remove all references to test-bigcrypt.
Diffstat (limited to 'README')
-rw-r--r--README3
1 files changed, 1 insertions, 2 deletions
diff --git a/README b/README
index 52b6752..18e91ae 100644
--- a/README
+++ b/README
@@ -9,7 +9,6 @@ don't need to work with libcrypt. You can replace libcrypt with a
symlink to libxcrypt.
The advantage of libxcrypt against libcrypt is, that it supports
-bigcrypt and blowfish password encryption and exports md5_crypt and
-the other md5 functions.
+blowfish password encryption.
Thorsten Kukuk, 21. October 2002