When you are using GNU/Linux, the password are (mainly) encripted in MD5 and SHA
The operative system attaches a SALT to this password before encrypting it to avoid dictionary attacs.
My question is, where does the SO attaches the SALT, before, or after the password?
For example, is my password is: peter2011 before encripting it, it does:
saltpeter2011 or peter2011salt ?
Thanks in advance.
I dont know if you missunderstood my question, but I'm not asking how does Linux stores his passwords, I'm asking how does encripts it, i mean:
encrypt_in_md5(saltpeter2011) or encript_in_md5(peter2011salt)
I know that on the /etc/shadow file are stored as $salt&encripted_password
Thanks in advance!
It's a little more complex than that, involving multiple rounds of appending and hashing. Best to just use crypt(3)
and let the system handle it.
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With