Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

mistake password salting

2 views
Skip to first unread message

Robert W. Baldwin

unread,
Aug 1, 1986, 7:08:29 PM8/1/86
to

The message that Tim and I sent about the Unix password
salting algorithm has a big mistake in it. The salt generation
function can in fact generate all 4096 possible salts if the
getpid() function behaves as expected.
Our mistake was viewing the generator function as
salt = 9 * getpid();
where in fact it is
salt = ( 9 * getpid() ) % 4096;
('%' is the mod operation in C).

But this is a bboard not a journal, so occasional mistakes
must be expected. Sorry.

0 new messages