From mboxrd@z Thu Jan 1 00:00:00 1970 Return-path: Received: from optimeas.de ([78.46.18.2]) by metis.ext.pengutronix.de with esmtp (Exim 4.72) (envelope-from ) id 1WLGr2-0007pt-3X for ptxdist@pengutronix.de; Wed, 05 Mar 2014 19:47:44 +0100 From: "Matthias Klein" Date: Wed, 05 Mar 2014 18:47:41 +0000 Message-Id: Mime-Version: 1.0 Subject: [ptxdist] Busybox password hashing algorithm Reply-To: ptxdist@pengutronix.de, Matthias Klein List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============1362892752==" Sender: ptxdist-bounces@pengutronix.de Errors-To: ptxdist-bounces@pengutronix.de To: "ptxdist@pengutronix.de" --===============1362892752== Content-Type: multipart/alternative; boundary="------=_MBADA3CDA2-3D99-479D-BCEA-8843A64FE19F" --------=_MBADA3CDA2-3D99-479D-BCEA-8843A64FE19F Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; format=flowed; charset=utf-8 Hello, our ptxdist 2014.01.0 based product got an external security audit. They complained that our passwords in the shadow file are hashed with=20 the outdated crypt(3) algorithm. Her advice is to use bcrypt, PBKDF2 or scrpy. We are using busybox for passwd etc. Is this a busybox limitation? Or can we change the hashing algorithm in=20 busybox? Or do we need to replace busybox' passwd etc. with something better? Best regards, Matthias --------=_MBADA3CDA2-3D99-479D-BCEA-8843A64FE19F Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8

Hello,

our ptxdist 2014.01.0 based product got an external security audi= t.

They complained that our passwords in the shadow file are hashed with= the outdated crypt(3) algorithm.

Her advice is to use bcrypt, PBKDF2 or scrpy.

We are using busybox for= passwd etc.

Is this a busybox limitation? Or can we change the hashing= algorithm in busybox?

Or do we need to replace busybox' passwd etc. with something = better?

Best regards,

Matthias

--------=_MBADA3CDA2-3D99-479D-BCEA-8843A64FE19F-- --===============1362892752== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline -- ptxdist mailing list ptxdist@pengutronix.de --===============1362892752==--