|
|
Message-ID: <502FD1D4.4020304@onsec.ru>
Date: Sat, 18 Aug 2012 21:33:08 +0400
From: Vladimir Vorontsov <vladimir.vorontsov@...ec.ru>
To: Solar Designer <solar@...nwall.com>
CC: john-dev@...ts.openwall.com
Subject: Re: salted raw MD5 on GPU
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Yes, : also available as salt's char.
I.e. Bitrix CMS:
$password_chars[] = ",.<>/?;:'\"[]{}\|`~!@#\$%^&*()-_+=";
...
$salt = randString($password_min_length, $password_chars);
18.08.12, 21:25, Solar Designer пишет:
> On Sat, Aug 18, 2012 at 09:17:29PM +0400, Vladimir Vorontsov
> wrote:
>> Binary (hex-encoded) salts more clearly. I.e. salt "%f\gs3;A"
>> require escaping in command line.
>
> Well, you won't need to specify it on the command line, but if we
> don't do hex-encoding, then the characters ':' (colon), CR, and LF
> would not be allowed (as they're part of the passwd-like file
> format). I guess ':' is a possible character in salts in your
> hashes? If so, we do need to support hex-encoding.
>
> Alexander
>
>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iEYEARECAAYFAlAv0dQACgkQshExP8cA6RS9BACfepNSx0kp/pt/r7FhwE60bRwe
X28An2jz1DSL5RuIMEERsiK0+KARB5uv
=Tl2X
-----END PGP SIGNATURE-----
Powered by blists - more mailing lists
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.