crypt_sunmd5(7) 맨 페이지 - 윈디하나의 솔라나라

개요

섹션
맨 페이지 이름
검색(S)

crypt_sunmd5(7)

Standards, Environments, Macros, Character Sets, and miscellany
                                                               crypt_sunmd5(7)



NAME
       crypt_sunmd5 - password hashing module using MD5 message hash algorithm

SYNOPSIS
       /usr/lib/security/$ISA/crypt_sunmd5.so

DESCRIPTION
       The  crypt_sunmd5  module  is a one-way password hashing module for use
       with crypt(3C) that uses the MD5 message hash algorithm. The  algorithm
       identifier for crypt.conf(5) and policy.conf(5) is md5.


       This  module  is  designed to make it difficult to crack passwords that
       use brute force attacks based on high speed  MD5  implementations  that
       use code inlining, unrolled loops, and table lookup.


       The maximum password length for crypt_sunmd5 is 255 characters.


       The  following  options  can  be  passed  to  the  module  by  means of
       crypt.conf(5):

       rounds=positive_number

           Specifies the number of additional rounds of MD5 to use in  genera‐
           tion  of  the  salt; the default number of rounds is 4096. Negative
           values have no effect and are  ignored,  that  is,  the  number  of
           rounds cannot be lowered below 4096.

           The  number  of  additional  rounds  is  stored  in the salt string
           returned by crypt_gensalt(3C). For example:


             $md5,rounds=1000$nlxmTTpz$

           When crypt_gensalt(3C) is being used to generate a new salt, if the
           number  of additional rounds configured in crypt.conf(5) is greater
           than that in the old salt, the value  from  crypt.conf(5)  is  used
           instead.  This allows for migration to stronger (but more time-con‐
           suming) salts on password change.


SECURITY
       The MD5 algorithm is currently considered weak for  cryptographic  use.
       This  algorithm  should be used only for compatibility with legacy sys‐
       tems and password entries. It is no  longer  included  in  the  default
       CRYPT_ALGORITHMS_ALLOW  list of algorithms to use to hash new passwords
       in policy.conf.

ATTRIBUTES
       See attributes(7) for descriptions of the following attributes:


       tab() box; cw(2.75i) |cw(2.75i) lw(2.75i) |lw(2.75i) ATTRIBUTE  TYPEAT‐
       TRIBUTE VALUE _ Availabilitysystem/library _ Interface StabilityCommit‐
       ted


SEE ALSO
       passwd(1), crypt_gensalt(3C), getpassphrase(3C), crypt(3C),  crypt_gen‐
       hash_impl(3C),  crypt_gensalt_impl(3C),  crypt.conf(5), passwd(5), pol‐
       icy.conf(5), attributes(7)

HISTORY
       The crypt_sunmd5 module was added to Solaris in Solaris 9 12/02 (Update
       2).  It  was removed from the CRYPT_ALGORITHMS_ALLOW list of algorithms
       to use to hash new passwords  in  the  default  policy.conf  in  Oracle
       Solaris 11.4.0.



Oracle Solaris 11.4               21 Jun 2021                  crypt_sunmd5(7)
맨 페이지 내용의 저작권은 맨 페이지 작성자에게 있습니다.
RSS ATOM XHTML 5 CSS3