[RADIATOR] BCRYPT

[Derek Buttineau]

On 2011-08-24, at 4:37 AM, Heikki Vatiainen wrote:

> Would this be for AuthBy SYSTEM or do you have something else in mind?
> 
> AuthBy SYSTEM currently supports $1$ (MD5) and support for $6$ (SHA-512)
> is in the patches for 4.8
> 
> I just recently noticed many systems support types 2, 2a, and 5 and
> there's also 2y that some systems may possibly use:
> 
> http://www.openwall.com/lists/announce/2011/07/17/1
> 
> I expect these will supported in the next release and will be in patches
> for 4.8 before that.

Hi Heikki,

I was actually thinking of AuthBy SQL.  We're currently using UNIX crypt, but realized it's time to improve security.  I'm being told that bcrypt is the way to go (OpenBSD style 2a/2y).  So I guess wait for 4.8 or the patches to be issued?

Thanks,

Derek