Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [day] [month] [year] [list]
Date: Tue, 21 May 2013 7:16:16 -0400
From:  <>
Subject: Password length restrictions removed from pbkdf2_hmac_sha*.h files

The 64 byte password length restrictions have been removed from these header files, both in the oSSL code, and the SSE code.  Passwords up to max length of JtR should be just fine (passwords up to max length handled by oSSL should be fine).

I have also re-added the PLAINTEXT_LENGTH define in all files that included "pbkdf2_hmac_sha1.h"  Those .c files were using the header to set this size.  That code in the header was removed.  Now all of them set PW len to 125.

I am sure there are other files which the PWL could be set up to 125, but I did not look deeper at this time. NOTE, I also need to get woking for as many of these as possible, so that we can get a max length test case added.


Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.