search for: crypt_set_format

Hello! adduser(8) perl script uses crypt(3) to generate encrypted passwords, as pointed in /usr/sbin/adduser itself. Currently in /etc/login.conf password format is MD5 as default but adduser always generates encrypted passwords in DES format. IMHO adduser script should read value of passwd_format in /etc/login.conf to decide what kind of salt (DES, MD5 or somewhat else) he gives to crypt. At

We still have MD5 as our default password hash, even though known-hash attacks against MD5 are relatively easy these days. We've supported SHA256 and SHA512 for many years now, so how about making SHA512 the default instead of MD5, like on most Linux distributions? Index: etc/login.conf =================================================================== --- etc/login.conf (revision