Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Tue, 23 Apr 2013 00:03:40 +0400
From: Alexander Cherepanov <cherepan@...me.ru>
To: john-dev@...ts.openwall.com
Subject: Re: formats that duplicate dynamics

On 2013-04-22 07:27, Solar Designer wrote:
> On Mon, Apr 22, 2013 at 07:24:05AM +0400, Alexander Cherepanov wrote:
>> On 2013-01-27 06:35, Solar Designer wrote:
>>> The "postgre" format at the very least needs to be renamed from the
>>> ridiculous "postgre" to "postgres".  This includes the filename,
>>> FORMAT_LABEL, and the "$postgre$" prefix string.
>>
>> BTW is postgres is even a good name for it? Isn't it better to leave it
>> for plain postgresql hashes and net-postgres (or something) for
>> PostgreSQL MD5 challenge-response. But maybe it's too late to change it...
>
> You may be right, or maybe we don't need a separate format for this
> since it's implementable as a dynamic format

Yeah:

[List.Generic:dynamic_1015]
Expression=md5(md5($p.$u).$s)
Flag=MGF_SALTED
Flag=MGF_USERNAME
Func=DynamicFunc__clean_input
Func=DynamicFunc__append_keys
Func=DynamicFunc__append_userid
Func=DynamicFunc__crypt_md5
Func=DynamicFunc__clean_input2
Func=DynamicFunc__append_from_last_output_to_input2_as_base16
Func=DynamicFunc__append_salt2
Func=DynamicFunc__crypt_md5_in2_to_out1
Test=$dynamic_1015$1d586cc8d137e5f1733f234d224393e8$HEX$f063f05d:openwall:postgres
Test=$dynamic_1015$1c4e11fb51835c3bbe9851ec91ec1375$HEX$c31803a2:password:postgres
Test=$dynamic_1015$bf2a64f35feba7bf1b633d60393c1356$HEX$684697c8:openwall:postgres

> (and might match an already defined one, even).

I don't see it.

-- 
Alexander Cherepanov

Powered by blists - more mailing lists

Your e-mail address:

Powered by Openwall GNU/*/Linux - Powered by OpenVZ