Date: Sat, 15 Aug 2015 19:37:59 +0300 From: Solar Designer <solar@...nwall.com> To: john-dev@...ts.openwall.com Subject: Re: auditing our use of FMT_* flags On Fri, Aug 14, 2015 at 10:39:43PM +0200, Frank Dittrich wrote: > On 08/14/2015 10:22 PM, Solar Designer wrote: > > We might want > > to see what invalid salt handling is currently most common for descrypt > > hashes in the wild, and revise this table accordingly, at which point it > > might happen that it'd be symmetric wrt the 8th bit. But not right now. > > Is descrypt really still used "in the wild"? Of course. > If yes, is there any excuse not to switch to something better? Just the usual reasons/excuses for keeping old systems running. I think some new embedded systems might still default to descrypt, though. QNX certainly did a while ago, and probably still does. Alexander
Powered by blists - more mailing lists
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.