BSD Hashes

[Stranger]

hey guys, i'm making a FAQ about system hashes, and i need your help
could you please tell me what type of hashes are used in NetBSD and PC-BSD systems(for crypting users passwords)? thank you again!

[classicmanpro]

Figure 3.34. Selecting a password encryption scheme.

[Stranger]

2 classicmanpro

thank you very much, i hope i'll find an answer for PC-BSD too

[Stranger]

one more question

"Figure 3.34. Selecting a password encryption scheme"

1) DES
2) MD5
3) Blowfish
4) SHA1

which SHA1 hash they mean? sha-512 or sha-256?

[BSDfan666]

SHA1 clearly indicates that it is not SHA256 or SHA512, notice the 1?

[Stranger]

Originally Posted by BSDfan666

SHA1 clearly indicates that it is not SHA256 or SHA512, notice the 1?

i see, it's just strange that NetBSD will use clear sha1 instead of sha512/256

thanks for help.

[BSDfan666]

Why is it odd? if the user has root access.. they can still attempt to brute force the password hashes regardless of key size, simple passwords will still be easy to find.

Remote security is generally considered more important, if you want to be safe, I'd recommend blowfish with more rounds.. and enforce a minimum password length.