Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Sat, 15 Aug 2015 19:37:59 +0300
From: Solar Designer <>
Subject: Re: auditing our use of FMT_* flags

On Fri, Aug 14, 2015 at 10:39:43PM +0200, Frank Dittrich wrote:
> On 08/14/2015 10:22 PM, Solar Designer wrote:
> > We might want
> > to see what invalid salt handling is currently most common for descrypt
> > hashes in the wild, and revise this table accordingly, at which point it
> > might happen that it'd be symmetric wrt the 8th bit.  But not right now.
> Is descrypt really still used "in the wild"?

Of course.

> If yes, is there any excuse not to switch to something better?

Just the usual reasons/excuses for keeping old systems running.

I think some new embedded systems might still default to descrypt,
though.  QNX certainly did a while ago, and probably still does.


Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.