crypt_sunmd5(7) 맨 페이지 - 윈디하나의 솔라나라

개요

섹션
맨 페이지 이름
검색(S)

crypt_sunmd5(7)

cr...5(7)Standards, Environments, Macros, Character Sets, and miscellancyr...5(7)

NAME
       crypt_sunmd5 - password hashing module using MD5 message hash algorithm

SYNOPSIS
       /usr/lib/security/$ISA/crypt_sunmd5.so

DESCRIPTION
       The  crypt_sunmd5  module  is a one-way password hashing module for use
       with crypt(3C) that uses the MD5 message hash algorithm. The  algorithm
       identifier for crypt.conf(5) and policy.conf(5) is md5.


       This  module  is  designed to make it difficult to crack passwords that
       use brute force attacks based on high speed  MD5  implementations  that
       use code inlining, unrolled loops, and table lookup.


       The maximum password length for crypt_sunmd5 is 255 characters.


       The  following  options  can  be  passed  to  the  module  by  means of
       crypt.conf(5):

       rounds=positive_number

           Specifies the number of additional rounds of MD5 to use in  genera‐
           tion  of  the  salt; the default number of rounds is 4096. Negative
           values have no effect and are  ignored,  that  is,  the  number  of
           rounds cannot be lowered below 4096.

           The  number  of  additional rounds is stored in the salt string re‐
           turned by crypt_gensalt(3C). For example:


             $md5,rounds=1000$nlxmTTpz$

           When crypt_gensalt(3C) is being used to generate a new salt, if the
           number of additional rounds configured in crypt.conf(5) is  greater
           than that in the old salt, the value from crypt.conf(5) is used in‐
           stead. This allows for migration to stronger (but more time-consum‐
           ing) salts on password change.


SECURITY
       The  MD5  algorithm is currently considered weak for cryptographic use.
       This algorithm should be used only for compatibility with  legacy  sys‐
       tems  and  password  entries.  It  is no longer included in the default
       CRYPT_ALGORITHMS_ALLOW list of algorithms to use to hash new  passwords
       in policy.conf.

ATTRIBUTES
       See attributes(7) for descriptions of the following attributes:

       tab()  box; cw(2.75i) |cw(2.75i) lw(2.75i) |lw(2.75i) ATTRIBUTE TYPEAT‐
       TRIBUTE VALUE _ Availabilitysystem/library _ Interface StabilityCommit‐
       ted


SEE ALSO
       passwd(1), crypt_gensalt(3C), getpassphrase(3C), crypt(3C),  crypt_gen‐
       hash_impl(3C),  crypt_gensalt_impl(3C),  crypt.conf(5), passwd(5), pol‐
       icy.conf(5), attributes(7)

HISTORY
       The crypt_sunmd5 module was added to Solaris in Solaris 9 12/02 (Update
       2). It was removed from the CRYPT_ALGORITHMS_ALLOW list  of  algorithms
       to  use  to hash new passwords in the default policy.conf in Oracle So‐
       laris 11.4.0.

Oracle Solaris 11.4               21 Jun 2021                        cr...5(7)
맨 페이지 내용의 저작권은 맨 페이지 작성자에게 있습니다.
RSS ATOM XHTML 5 CSS3