From: Marc Kleine-Budde <mkl@pengutronix.de>
To: ptxdist@pengutronix.de, Matthias Klein <matthias.klein@optimeas.de>
Subject: Re: [ptxdist] Busybox password hashing algorithm
Date: Wed, 05 Mar 2014 19:55:14 +0100 [thread overview]
Message-ID: <53177312.1090205@pengutronix.de> (raw)
In-Reply-To: <em441128f2-13c0-449b-b0ab-376fd5eede0f@nb-mak>
[-- Attachment #1.1: Type: text/plain, Size: 867 bytes --]
On 03/05/2014 07:47 PM, Matthias Klein wrote:
> Hello,
>
> our ptxdist 2014.01.0 based product got an external security audit.
> They complained that our passwords in the shadow file are hashed with
> the outdated crypt(3) algorithm.
> Her advice is to use bcrypt, PBKDF2 or scrpy.
>
> We are using busybox for passwd etc.
>
> Is this a busybox limitation? Or can we change the hashing algorithm in
> busybox?
> Or do we need to replace busybox' passwd etc. with something better?
Have a look at the BUSYBOX_USE_BB_CRYPT and BUSYBOX_USE_BB_CRYPT_SHA
option.
Marc
--
Pengutronix e.K. | Marc Kleine-Budde |
Industrial Linux Solutions | Phone: +49-231-2826-924 |
Vertretung West/Dortmund | Fax: +49-5121-206917-5555 |
Amtsgericht Hildesheim, HRA 2686 | http://www.pengutronix.de |
[-- Attachment #1.2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 242 bytes --]
[-- Attachment #2: Type: text/plain, Size: 48 bytes --]
--
ptxdist mailing list
ptxdist@pengutronix.de
next prev parent reply other threads:[~2014-03-05 18:55 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
2014-03-05 18:47 Matthias Klein
2014-03-05 18:55 ` Marc Kleine-Budde [this message]
2014-03-05 19:19 Matthias Klein
2014-03-05 20:21 ` Matthias Klein
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=53177312.1090205@pengutronix.de \
--to=mkl@pengutronix.de \
--cc=matthias.klein@optimeas.de \
--cc=ptxdist@pengutronix.de \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox