Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [day] [month] [year] [list]
Date: Tue, 21 May 2013 7:16:16 -0400
From:  <jfoug@....net>
To: john-dev@...ts.openwall.com
Subject: Password length restrictions removed from pbkdf2_hmac_sha*.h files

The 64 byte password length restrictions have been removed from these header files, both in the oSSL code, and the SSE code.  Passwords up to max length of JtR should be just fine (passwords up to max length handled by oSSL should be fine).

I have also re-added the PLAINTEXT_LENGTH define in all files that included "pbkdf2_hmac_sha1.h"  Those .c files were using the header to set this size.  That code in the header was removed.  Now all of them set PW len to 125.

I am sure there are other files which the PWL could be set up to 125, but I did not look deeper at this time. NOTE, I also need to get pass_gen.pl woking for as many of these as possible, so that we can get a max length test case added.

Jim.

Powered by blists - more mailing lists

Your e-mail address:

Powered by Openwall GNU/*/Linux - Powered by OpenVZ