summaryrefslogtreecommitdiffstats
path: root/secure/lib/libcrypt
Commit message (Collapse)AuthorAgeFilesLines
* MFC r265995:delphij2014-05-281-1/+1
| | | | | | Switch using the new $2b$ format by default, when bcrypt is used. Relnotes: default Blowfish crypt(3) format have been changed to $2b$.
* MFC r262501:delphij2014-03-271-33/+52
| | | | | | | | | | | | | | | | | | Refresh our implementation of OpenBSD's Blowfish password format. Notable changes: - Support of $2b$ password format to address a problem where very long passwords (more than 256 characters, when an integer overflow would happen and cause the length to wrap at 256). - Updated pseudo code in comments to reflect the reality. - Removed our local shortcut of processing magic string and rely on the centralized and tigntened validation. - Diff reduction from upstream. For now we are still generating the older $2a$ format of password but we will migrate to the new format once the format is formally finalized.
* Update the previous openssl fix. [12:01]bz2012-05-301-1/+1
| | | | | | | | Fix a bug in crypt(3) ignoring characters of a passphrase. [12:02] Security: FreeBSD-SA-12:01.openssl (revised) Security: FreeBSD-SA-12:02.crypt Approved by: so (bz, simon)
* Return NULL on error rather than ":", per the crypt(3) man page.kevlo2012-02-221-6/+5
| | | | Discussed in: http://www.openwall.com/lists/oss-security/2011/11/15/3
* Strip the private blowfish code down to only that which ismarkm2003-06-023-263/+4
| | | | | required to make crypt(3) blowfish "$2a$..." hashes. Lint and warnsify.
* No functional change, but big code cleanup. WARNS, lint(1) and style(9).markm2002-03-064-216/+92
|
* o Move NTOHL() and associated macros into <sys/param.h>. These aremike2002-02-181-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | deprecated in favor of the POSIX-defined lowercase variants. o Change all occurrences of NTOHL() and associated marcros in the source tree to use the lowercase function variants. o Add missing license bits to sparc64's <machine/endian.h>. Approved by: jake o Clean up <machine/endian.h> files. o Remove unused __uint16_swap_uint32() from i386's <machine/endian.h>. o Remove prototypes for non-existent bswapXX() functions. o Include <machine/endian.h> in <arpa/inet.h> to define the POSIX-required ntohl() family of functions. o Do similar things to expose the ntohl() family in libstand, <netinet/in.h>, and <sys/param.h>. o Prepend underscores to the ntohl() family to help deal with complexities associated with having MD (asm and inline) versions, and having to prevent exposure of these functions in other headers that happen to make use of endian-specific defines. o Create weak aliases to the canonical function name to help deal with third-party software forgetting to include an appropriate header. o Remove some now unneeded pollution from <sys/types.h>. o Add missing <arpa/inet.h> includes in userland. Tested on: alpha, i386 Reviewed by: bde, jake, tmm
* __FBSDID() (second half of src/lib/libcrypt changes)peter2001-10-233-6/+10
|
* Add OpenBSD-style blowfish password hashing. This makes one lessmarkm2001-03-113-0/+1249
| | | | | | | | | | gratuitous difference between us and our sister project. This was given to me _ages_ ago. May apologies to Paul for the length of time its taken me to commit. Obtained from: Niels Provos <provos@physnet.uni-hamburg.de>/OpenBSD Submitted by: Paul Herman <pherman@frenchfries.net>
* Merge into a single US-exportable libcrypt, which only providespeter2000-12-281-73/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | one-way hash functions for authentication purposes. There is no more "set the libcrypt->libXXXcrypt" nightmare. - Undo the libmd.so hack, use -D to hide the md5c.c internals. - Remove the symlink hacks in release/Makefile - the algorthm is set by set_crypt_format() as before. If this is not called, it tries to heuristically figure out the hash format, and if all else fails, it uses the optional auth.conf entry to chose the overall default hash. - Since source has non-hidden crypto in it there may be some issues with having the source it in some countries, so preserve the "secure/*" division. You can still build a des-free libcrypt library if you want to badly enough. This should not be a problem in the US or exporting from the US as freebsd.org had notified BXA some time ago. That makes this stuff re-exportable by anyone. - For consistancy, the default in absence of any other clues is md5. This is to try and minimize POLA across buildworld where folk may suddenly be activating des-crypt()-hash support. Since the des hash may not always be present, it seemed sensible to make the stronger md5 algorithm the default. All things being equal, no functionality is lost. Reviewed-by: jkh (flame-proof suit on)
* Add working and easy crypt(3)-switching. Yes, we need a whole new APIgreen2000-08-221-0/+1
| | | | | | | | | | | | | | for crypt(3) by now. In any case: Add crypt_set_format(3) + documentation to -lcrypt. Add login_setcryptfmt(3) + documentation to -lutil. Support for switching crypt formats in passwd(8). Support for switching crypt formats in pw(8). The simple synopsis is: edit login.conf; add a passwd_format field set to "des" or "md5"; go nuts :) Reviewed by: peter
* Add NODESCRYPTLINKS knob to prevent spamming of libcrypt -> libscryptkris2000-02-291-0/+2
| | | | | | | symlinks. The name is against my better judgement, but I defer to ancient tradition here because I'm a nice guy. Reviewed by: -current
* Really really remove SHA-1 support.kris2000-01-091-1/+1
|
* Remove the SHA stuff properly.jkh2000-01-081-1/+1
|
* I missed the LDADD/DPADD for -lmd in the secure cases. :-(peter1999-12-191-3/+0
| | | | Pointed out by: marcel
* Colour me stupid. This is a better way of using the macros.markm1999-09-211-1/+1
|
* Do this the same way as Internat to reduce diffs.markm1999-09-211-1/+1
|
* Someone changed major numbers of the libraries from 2 to 3 for 0 (zero) reasons.dt1999-09-211-1/+1
| | | | | | | | | Revert the major number back to 2. libcrypt only export one function, before the recent changes and now: char *crypt(const char *key, const char *salt); The prototype didn't changed. Internal representation of `char' and `char *' didn't changed. Therefore, there is no reason to change the version number.
* Restore SONAME setting, otherwise libdescrypt.so.3 doesn't end up withpeter1999-09-211-0/+4
| | | | a special SONAME of libcrypt.so.3 and the runtime symlink doesn't work.
* Make this completely dependant on the exportable libcrypt, to avoidmarkm1999-09-2012-1737/+95
| | | | | duplication of effort. Also a large cleanup of the code, inspired by Brandon Gillespie.
* $Header$ -> $FreeBSD$peter1999-08-281-1/+2
|
* $Id$ -> $FreeBSD$peter1999-08-2810-11/+11
|
* Various man page cleanup:mpp1999-08-151-3/+3
| | | | | - Be consistent with section names as outlined in mdoc(7). - Other misc mdoc cleanup.
* Fix symlinking. Without the -f "force" option, the wrong versionmarkm1999-01-241-5/+5
| | | | | can be found. Submitted by: Bruce
* The new crypt code breaks "make world". Back it out.markm1999-01-2310-1/+951
|
* Removed from the secure/lib/libcrypt area, because of the rewrite to howbrandon1999-01-219-950/+0
| | | | | | the Makefile handles des support by just including the single .c file. Reviewed by: Mark Murray
* BINFORMAT -> OBJFORMAT ready for E-day. Untested 'cause I'm outsidejb1998-08-311-4/+4
| | | | the US and not allowed to see this. I kept my eyes closed. 8-)
* Teach libdescrypt about elf builds.peter1997-09-051-3/+19
|
* Revert $FreeBSD$ to $Id$peter1997-02-2210-11/+11
|
* Make the long-awaited change from $Id$ to $FreeBSD$jkh1997-01-1410-11/+11
| | | | | | | | This will make a number of things easier in the future, as well as (finally!) avoiding the Id-smashing problem which has plagued developers for so long. Boy, I'm glad we're not using sup anymore. This update would have been insane otherwise.
* Bring in my changes for removing the pestilent obj links (unless youjkh1996-06-241-8/+2
| | | | | really want them) from /usr/src. This is the final version of the patches, incorporating the feedback I've received from -current.
* Split libcrypt and libcipher man pages.markm1996-04-132-91/+6
|
* Add back missing crypt.3 man page.jkh1996-02-211-1/+2
|
* Dual personality crypt(3). This crypt will choose its encryption algorithmmarkm1995-12-165-34/+191
| | | | | (DES or MD5) based on the type of salt used. Salt beginning with "$1$" indicates MD5.
* Remove trailing whitespace.rgrimes1995-05-304-13/+13
|
* More elegant fix for short settings.csgr1994-09-192-22/+38
| | | | | (Our existing fixes already plugged the security holes involved.) Submitted by: Geoff Rehmet after consultation with David Burren
* Back out static hacks & build of usr.bin until Geoff informs thepst1994-09-072-6/+6
| | | | | | world of his master plan. Submitted by: pst
* Remove static in front of declarations for des_setkey and des_cipherpst1994-09-072-6/+6
| | | | | | | | | | | so that linking against -lcrypt (-ldescrypt) will give us the good versions instead of the stubs in libc. (These changes need to be made to the non-US version of libdescrypt too!) Allow building and support for bdes program. A bit more work still needs to be done on secure telnet. Submitted by: pst
* Hopefully fix bogus permissions.wollman1994-08-261-1/+2
|
* Install libdescrypt.so immutable.wollman1994-08-261-1/+2
|
* Fix afterinstall rule for generating links to the real libcryptcsgr1994-08-201-8/+16
| | | | Submitted by: Geoff
* when making test programs, look for libdescrypt, not libcryptcsgr1994-08-121-2/+2
| | | | Submitted by: Geoff Rehmet
* 1) don't make bdes yetcsgr1994-08-121-1/+6
| | | | | | 2) fix .include in secure/lib/Makefile.inc 3) fix afterinstall rule in libcrypt/Makefile Submitted by: Geoff Rehmet
* Install secure/lib/libcrypt as libdescrypt, and symlink it tocsgr1994-08-091-3/+23
| | | | | | libcrypt. There may be a little modification neede to this makefile once we start working on tidy make world's. Submitted by: geoff.
* Modify libcrypt so that the only exported symbol is _crypt().csgr1994-08-086-266/+58
| | | | Submitted by: Geoff Rehmet
* This commit was generated by cvs2svn to compensate for changes in r1956,csgr1994-08-0810-0/+1749
|\ | | | | | | which included commits to RCS files with non-trunk default branches.
| * Unecumbered securedist from FreeBSD 1.1.5.1 - sources for libcrypt.csgr1994-08-0810-0/+1749
| | | | | | The next commit will remove all symbols except _crypt() Reviewed by: Geoff Rehmet Submitted by: David Burren
* Unecumbered securedist from FreeBSD 1.1.5.1 - sources for libcrypt.csgr1994-08-081-0/+730
The next commit will remove all symbols except _crypt() Reviewed by: Geoff Rehmet Submitted by: David Burren
OpenPOWER on IntegriCloud