Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Thu, 9 Aug 2012 19:33:56 -0400
From: Rich Felker <dalias@...ifal.cx>
To: musl@...ts.openwall.com
Subject: Re: crypt* files in crypt directory

On Thu, Aug 09, 2012 at 05:51:04AM +0400, Solar Designer wrote:
> BTW, the extended DES-based hashes that are already supported in musl
> allow for variable iteration counts encoded along with hashes too, and
> that's the way it should be.

The maximum iteration count the format allows is 2^24-1, which
although a bit excessive is still in the range of "sane". It takes 11
seconds to compute on my Atom. Compare this to blowfish count=2^20
taking at least a minute, and therefore count=2^31 (the maximum
allowed) taking over 2048 minutes (1.5 days).

Rich

Powered by blists - more mailing lists

Your e-mail address:

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.