Re: Re: Re: Storing encryted passwords in MySQL

Replies are listed 'Best First'.
Re: Re: Re: Re: Storing encryted passwords in MySQL by waswas-fng (Curate) on Jun 06, 2003 at 21:12 UTC
/etc/shadow (crypt shadow files at least) store 13 chars because the salt that is ues is stored as well as the encrypted password. May I suggest using MD5 digests for the passwords you are storing -- they have two advantages, first they allow long passwords, second crypt has some parts to it that make it easy to brute force (if not completely break it depending on its implementation). `For an example on the /etc/shadow files you may think of it this way: Get actual cripted password salt from shadow: $salt = substr($password_string_from_shadow, 0, 2); $newpass = $salt . crypt($string_i_think_is_password,$salt); $newpass is now a string you can push back to password file...` [download] -Waswas	[reply] [d/l]
Re: Re: Re: Re: Storing encryted passwords in MySQL by spacewarp (Pilgrim) on Jun 06, 2003 at 23:59 UTC
Aha.. that could be it. I'm running Redhat 6.2. Thanks so much for your help. Spacewarp `DISCLAIMER:<BR> Use of this advanced computing technology does not imply an endorsemen +t<BR> of Western industrial civilization.<BR>` [download]	[reply] [d/l]