Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Mon, 3 Sep 2012 21:08:45 +0200
From: Frank Dittrich <frank_dittrich@...mail.com>
To: john-dev@...ts.openwall.com
Subject: Re: How should one select PLAINTEXT_LENGTH in a format

On 08/23/2012 04:37 PM, Claudio André wrote:
> How do i choose a number to use as the maximum length of a plaintext
> password. 16, 24, 32, ...?
> 
> Do you guys have a rule? Or, at least, advices?

In addition to what others suggested:
-IMHO it makes not much sense to support a maximum length which is
larger than what the software which uses the hash format supports
-it is a good idea to document the maximum plaintext length (in
bytes/and or charachers) supported by the software which uses the hash
format (if you are afraid that maximum length might change over time,
document the release you checked)

Frank

Powered by blists - more mailing lists

Your e-mail address:

Powered by Openwall GNU/*/Linux - Powered by OpenVZ