Standards, Environments, and Macros               cryptsunmd5(5)



NAME
     cryptsunmd5 - password hashing  module  using  MD5  message
     hash algorithm

SYNOPSIS
     /usr/lib/security/$ISA/cryptsunmd5.so


DESCRIPTION
     The cryptsunmd5 module is a one-way password hashing module
     for  use with crypt(3C) that uses the MD5 message hash algo-
     rithm.  The  algorithm  identifier  for  crypt.conf(4)   and
     policy.conf(4) is md5.


     This module is designed to make it difficult to crack  pass-
     words  that  use brute force attacks based on high speed MD5
     implementations that use code inlining, unrolled loops,  and
     table lookup.


     The maximum password length for cryptsunmd5 is 255  charac-
     ters.


     The following options can be passed to the module  by  means
     of crypt.conf(4):

     rounds=    Specifies the  number  of  addi-
                                 tional  rounds  of MD5 to use in
                                 generation  of  the  salt;   the
                                 default   number  of  rounds  is
                                 4096. Negative  values  have  no
                                 effect and are ignored, that is,
                                 the number of rounds  cannot  be
                                 lowered below 4096.

                                 The number of additional  rounds
                                 is  stored  in  the  salt string
                                 returned  by  cryptgensalt(3C).
                                 For example:

                                   $md5,rounds=1000$nlxmTpz$

                                 When cryptgensalt(3C) is  being
                                 used  to generate a new salt, if
                                 the number of additional  rounds
                                 configured  in  crypt.conf(4) is
                                 greater than  that  in  the  old
                                 salt,     the     value     from
                                 crypt.conf(4) is  used  instead.
                                 This  allows  for  migration  to



SunOS 5.11          Last change: 23 Dec 2003                    1






Standards, Environments, and Macros               cryptsunmd5(5)



                                 stronger   (but    more    time-
                                 consuming)   salts  on  password
                                 change.


ATRIBUTES
     See attributes(5) for descriptions of the  following  attri-
     butes:



     
           ATRIBUTE TYPE               ATRIBUTE VALUE       
    
     MT-Level                     Safe                        
    


SEE ALSO
     passwd(1),        crypt(3C),         cryptgenhashimpl(3C),
     cryptgensalt(3C),                   cryptgensaltimpl(3C),
     getpassphrase(3C), crypt.conf(4), passwd(4), policy.conf(4),
     attributes(5)
































SunOS 5.11          Last change: 23 Dec 2003                    2