Poul-Henning Kamp 3b2b7f71de *** ATTENTION *** YOU MIGHT BE ABOUT TO BE HOSED *** ATTENTION *** ... This effectively changes the non-DES password algoritm. If you have the "securedist" installed you will have no problems with this. (Though you might want to consider using this password-encryption instead of the DES-based if your system is likely to be hacked) If you are running a -current system without the "securedist" installed: YOU WILL NEED TO CHANGE ALL PASSWORDS !! There is no backwards mode. Suggested procedure is: Update your sources cd /usr/src/lib/libcrypt make clean make all make install passwd root <set roots new password> change password for any other users on the system. This algorithm is expected to be much better than the traditional DES- based algorithm. It uses the MD5 algorithm at what it is best at, as opposed to the DES algorithm at something it isn't good at at all. The algorithm is designed such that it should very hard to shortcut the calculations needed to build a dictionary, and to make partial knowledge (Hmm, his password starts with a 'P'...) useless. Of course if somebody breaks the MD5 algorithm this looses too. The salt is 48 bits (8 char @ base64). The encrypted password is 128 bits. And I am positively delighted to say that it takes 34 msec to crypt() a password on a Pentium/60Mhz, so building a dictionary is not really an option for hackers at the moment.		1994-11-07 21:07:09 +00:00
..
csu/i386	Call reduced (8-bit only) startup_setlocale()	1994-09-24 16:01:30 +00:00
libc	Date: Wed, 26 Oct 1994 15:44:49 -0600	1994-11-05 18:49:34 +00:00
libcompat	Add sanity check for "no previous regular expression" state,	1994-09-14 22:25:15 +00:00
libcrypt	*** ATTENTION *** YOU MIGHT BE ABOUT TO BE HOSED *** ATTENTION ***	1994-11-07 21:07:09 +00:00
libcurses	Add const to termcap prototypes to help libg++ 2.6.1 compiling,	1994-11-04 15:14:03 +00:00
libedit	Add LDADD+= -ltermcap	1994-10-12 02:06:02 +00:00
libf2c	Use -DNON_UNIX_STDIO as our FILE doesn't have the usual fields.	1994-10-26 18:53:13 +00:00
libF77	Library for f2c (part 2 of 2)	1994-10-26 18:17:41 +00:00
libI77	Library for f2c. (part 1 of 2)	1994-10-26 18:15:35 +00:00
libkvm	A semicolon was lost.	1994-11-07 19:54:55 +00:00
libm	Declare huge and tiny as volatile so that gcc doesn't evaluate huge*huge	1994-09-08 11:19:43 +00:00
libmd	Added "const" to the arguments here and there.	1994-11-07 20:48:35 +00:00
libmytinfo	More verbose diagnostic, if fails	1994-10-31 03:03:18 +00:00
libncurses	This curses fix allows to print something in lower right corner	1994-11-06 15:30:37 +00:00
libpam/modules	Add skey supprot	1994-08-21 19:26:22 +00:00
libresolv	BSD 4.4 Lite Lib Sources	1994-05-27 05:00:24 +00:00
librpc	Make up for the fact that rpc headers are now installed from include.	1994-08-05 01:59:40 +00:00
librpcsvc	Use ${ECHO} instead of echo' so that make -s' is fairly quiet.	1994-08-28 17:48:43 +00:00
libskey	Remove extra newline.	1994-10-27 18:15:42 +00:00
libtelnet	The big crypt removal - make libtelnet exportable.	1994-08-12 22:41:29 +00:00
libterm	Correct the man page extent.	1994-08-08 19:26:23 +00:00
libtermcap	Oops, back out ospeed fix, I forget that flushing can occurse _after_	1994-10-06 21:02:21 +00:00
libutil	Added $Id$	1994-09-24 02:59:15 +00:00
liby	BSD 4.4 Lite Lib Sources	1994-05-27 05:00:24 +00:00
msun	Install math.h.	1994-09-08 10:40:23 +00:00
ncurses/ncurses	Add -I${.CURDIR}	1994-10-28 06:58:04 +00:00
rpcsvc	Makefile to build librpcsvc. (All sources automatically generated.)	1994-08-07 23:21:08 +00:00
Makefile	Added libf2c, the library for f2c.	1994-10-27 11:07:34 +00:00
Makefile.inc	From 1.1.5: define default shared library versions. For 2.0, use version	1994-08-04 22:44:00 +00:00