Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.python > #21468

Re: How to re-implement the crypt.crypt function?

From Christian Heimes <lists@cheimes.de>
Subject Re: How to re-implement the crypt.crypt function?
Date 2012-03-10 21:36 +0100
References <28304124.1374.1331408016748.JavaMail.geo-discussion-forums@yncd8> <roy-8C03E0.15154610032012@news.panix.com>
Newsgroups comp.lang.python
Message-ID <mailman.551.1331411820.3037.python-list@python.org> (permalink)

Show all headers | View raw

Am 10.03.2012 21:15, schrieb Roy Smith:
> By today's standards, the algorithm isn't considered very strong.  The 
> only place I'm aware that uses it is unix password files, and even there 
> many (most?) systems have replaced it with something stronger such as 
> SHA1.  Maybe Apache .htaccess files?

The algorithm with identifier 6 is a SHA-512 crypt algorithm with a
lengthy salt (IIRC up to 1024 bits) and 40,000 rounds of SHA-512. It's
the default algorithm on modern Linux machines and believed to be very
secure.

The large salt makes a rainbow table attack impossible and the 40,000
rounds require a lot of CPU time, even on modern systems.

Christian

Back to comp.lang.python | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

How to re-implement the crypt.crypt function? Cosmia Luna <cosmius@gmail.com> - 2012-03-10 11:33 -0800
  Re: How to re-implement the crypt.crypt function? Roy Smith <roy@panix.com> - 2012-03-10 15:15 -0500
    Re: How to re-implement the crypt.crypt function? Christian Heimes <lists@cheimes.de> - 2012-03-10 21:36 +0100
      Re: How to re-implement the crypt.crypt function? Roy Smith <roy@panix.com> - 2012-03-10 15:41 -0500
        Re: How to re-implement the crypt.crypt function? Christian Heimes <lists@cheimes.de> - 2012-03-10 22:07 +0100
  Re: How to re-implement the crypt.crypt function? Christian Heimes <lists@cheimes.de> - 2012-03-10 21:16 +0100
    Re: How to re-implement the crypt.crypt function? Cosmia Luna <cosmius@gmail.com> - 2012-03-11 03:10 -0700
    Re: How to re-implement the crypt.crypt function? Cosmia Luna <cosmius@gmail.com> - 2012-03-11 03:10 -0700

csiph-web