Displaying 20 results from an estimated 1000 matches similar to: "Time for key stretching in encrypted private keys?"
2020 Apr 25
2
[PATCH 1/3] Add private key protection information extraction to ssh-keygen
Add private key protection information extraction to shh-keygen using -v
option on top of -y option which is already parsing the private key.
Technically, the passphrase isn't necessary to do this, but it is the
most logical thing to do for me.
Adding this to -l option is not appropriate because fingerprinting is
using the .pub file when available.
An other idea is to add a new option, I
2012 Aug 30
2
Shell access to SSH KDF
Hi everyone.
I'm currently running through FIPS validation, and this year CAVP
requires KDF tests for SSH. I'm running OpenSSH v5.6p1 and I see that
the 6 keys that I need are derived in kex_derived_keys in kex.c.
However, I don't yet see any way for me to access this function from an
existing command line tool, being able to pass in K, H, and the
session_id from the test vector. Is
2014 Mar 03
6
[Bug 2207] New: Potential NULL deference, found using coverity
https://bugzilla.mindrot.org/show_bug.cgi?id=2207
Bug ID: 2207
Summary: Potential NULL deference, found using coverity
Product: Portable OpenSSH
Version: -current
Hardware: Other
OS: FreeBSD
Status: NEW
Severity: enhancement
Priority: P5
Component: sshd
Assignee:
2014 Jul 25
1
improving passphrase protected private keys
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hi,
I got a proposal
for a slight different default
private key encryption protocol.
Here is my understanding what
ssh-keygen currently does.
According to this article:
http://martin.kleppmann.com/2013/05/24/improving-security-of-ssh-private-keys.html
when you create a new key with a
passphrase to protect it, ssh-keygen
uses a hard-coded openssl
2017 Aug 26
2
Register Allocation and Scheduling Issues
Hello,
I have defined 8 registers in registerinfo.td file in the following order:
R_0, R_1, R_2, R_3, R_4, R_5, R_6, R_7
But the generated assembly code only uses 2 registers. How to enable it to
use all 8? Also can i control the ordering like after R_0 can i use R_5
without changes in registerinfo.td?
What changes are required here? either in scheduling or register allocation
phases?
2020 Aug 30
2
PBKDF2 password hashing as in ASP.NET Core
Thank you for your reply.
It's not that simple, though. Just because some core algorithms are
standardised and should be compatible doesn't mean their use in
different implementations leads to interoperable data. The key point
here seems to be that Dovecot just supports SHA-1 with PBKDF2, not
SHA-256. So I'm out of luck here. The different formats are no longer
relevant then.
2020 Aug 29
2
PBKDF2 password hashing as in ASP.NET Core
Hello,
I'm setting up a new server and, again, seek for a decently secure (from
a security specialist's POV) way to store and verify user passwords in a
database. Additionally now, GDPR requires me to use a solid
state-of-the-art solution.
My OS is Ubuntu 20.04, Dovecot version 2.3.7, database backend with
PostgreSQL 12.
Obviously, storing the plaintext password is a terrible idea.
2018 Nov 11
1
Multiple grub2 Users with Passwords
Hello All,
I am trying to set multiple users with passwords for modifying grub2
menu entries at boot. I know I can set a "root" user grub2 password with
grub2-setpassword. I have also been able to make a grub2 user password
using the grub2-mkpasswd-pbkdf2 command and adding
??? set superusers="user1"
to the /etc/grub.d/40_custom file. However, I have multiple user
2012 Jun 08
13
Default password hash
We still have MD5 as our default password hash, even though known-hash
attacks against MD5 are relatively easy these days. We've supported
SHA256 and SHA512 for many years now, so how about making SHA512 the
default instead of MD5, like on most Linux distributions?
Index: etc/login.conf
===================================================================
--- etc/login.conf (revision
2005 Mar 17
1
Last guy to get BV working outbound?
I have tried everything to get BV working outbound. All worked fine
until the BV change last week. I called BV and they changed me to sip
gen with a new password. I stripped my Asterisk server to one phone on
Zap/1 until I get this working. The same BV account works fine with a
SPA-3000 so I don't suspect a firewall problem.
Symptoms: Asterisk registers with BV Ok
Incoming calls work
2018 Dec 06
3
argonid and dovecote
on a FreeBSD 11.2 amd64 machine, I am trying to get Dovecot 2.3.4 to play
nice with "argonid" encryption.
In the "10-auth.conf" file, I tried:
auth_mechanisms = plain argon2id
Upon restarting dovecot, I received an error message when attempting to
actually it:
auth: FATAL: Unknown authentication mechanism "ARGON2ID"
Output from doveadm pw -l
doveadm pw -l
SHA1
2005 May 18
0
SIP: Failed to authenticate
Hello--
Looking for a solution. I'm using asterisk HEAD version, from a day or
two ago. Trying to register with a Metaswitch voip server via sip.
They gave me a userid, and a password. I plug it into a register command
in sip.conf:
register => 3074449999:pword@isp
[isp]
realm=voip.isp.net
auth=3074449999#c491b58f6fd6da12691fa0de86fbbcc3@voip.isp.net
type=peer
context=workline
2023 Jul 31
5
Call for testing: OpenSSH 9.4
Hi,
OpenSSH 9.4 is almost ready for release, so we would appreciate testing
on as many platforms and systems as possible. This is a bugfix release.
Snapshot releases for portable OpenSSH are available from
http://www.mindrot.org/openssh_snap/
The OpenBSD version is available in CVS HEAD:
http://www.openbsd.org/anoncvs.html
Portable OpenSSH is also available via git using the
instructions at
2018 Dec 03
2
dovecot and argon2 encryption
I am using a FreeBSD 11-2 amd/64 system with dovecot version 2.3.4 installed.
I was playing around with different encryption schemes.
doveadm pw -l
SHA1 SSHA512 BLF-CRYPT PLAIN HMAC-MD5 OTP SHA512 SHA RPA DES-CRYPT CRYPT SSHA
MD5-CRYPT SKEY PLAIN-MD4 PLAIN-MD5 SCRAM-SHA-1 LANMAN SHA512-CRYPT CLEAR
CLEARTEXT SSHA256 NTLM MD5 PBKDF2 SHA256 CRAM-MD5 PLAIN-TRUNC SHA256-CRYPT
SMD5 DIGEST-MD5
2019 Feb 13
3
Using SHA256/512 for SQL based password
On 2/13/19 1:23 AM, Matthias Fechner via dovecot wrote:
>
>
> Am 13. Februar 2019 00:34:15 schrieb Robert Moskowitz
> <rgm at htt-consult.com>:
>
>> On 2/12/19 6:03 PM, Matthias Fechner via dovecot wrote:
>>> Am 12.02.2019 um 17:05 schrieb Robert Moskowitz via dovecot:
>>>> I have trying to find how to set the dovecot-sql.conf for using
2017 Aug 26
2
Error in generating Object Code for implemented assembly vector instructions
i want to emit binary code for the following implemented vector assembly
instructions.
P_256B_LOAD_DWORD R_0_R2048b_0, pword ptr [rip + b]
P_256B_LOAD_DWORD R_0_R2048b_1, pword ptr [rip + c]
P_256B_VADD R_0_R2048b_0, R_0_R2048b_1, R_0_R2048b_0
P_256B_STORE_DWORD pword ptr [rip + a], R_0_R2048b_0
I added the following lines in X86MCInstLower.cpp;
unsigned NewOpc;
switch (OutMI.getOpcode())
2007 Jun 14
2
connecting to DB2 database
Hi,
i am trying to connect to a DB2 server using the DBI library.
getData <- function()
{
driver <- dbDriver("DB2")
conn <- dbConnect(driver,"server","uname","pword")
data <- dbSendquery(conn, "select etc.")
}
When I run the function, i get the error
> data <- getData()
Error in
2019 Feb 13
3
Using SHA256/512 for SQL based password
On 2/13/19 8:30 AM, Aki Tuomi wrote:
> On 13.2.2019 15.18, Robert Moskowitz via dovecot wrote:
>>
>> On 2/13/19 1:23 AM, Matthias Fechner via dovecot wrote:
>>>
>>> Am 13. Februar 2019 00:34:15 schrieb Robert Moskowitz
>>> <rgm at htt-consult.com>:
>>>
>>>> On 2/12/19 6:03 PM, Matthias Fechner via dovecot wrote:
2014 Apr 16
0
[XPOST] Invoicing - 1.0.0 released
Hello people,
We have released invoicing gem which helps you in creating, managing and
generating pdf for invoices.
Bit of background: Invoicing gem was initially developed by Martin
Kleppmann (https://github.com/ept/) for generating and displaying invoices.
This release polishes the gem, makes it compatible with rails 3 and rails
4, adds pdf generation
source:
2003 May 13
2
Setting up a Samba PDC to server XP pro clients
I have been setting up Windows servers to serve windows clients for many
years and am now looking at samba as an alternative. I am currently
having a problem setting up samba as a PDC for windows XP clients. I
can see the samba server through My Network Places. If I try to access
it I can after putting in one of the usernames and passwords I have set
up using smbpasswd. I have added a machine