CVS log for Owl/packages/glibc/crypt_blowfish/wrapper.c

Up to [Openwall CVS] / Owl / packages / glibc / crypt_blowfish

Request diff between arbitrary revisions

Keyword substitution: kv
Default branch: MAIN

Added OpenBSD 5.5+ "$2b$" prefix support to crypt_blowfish (same as "$2y$")

Sync with current (crypt_blowfish 1.2, glibc 2.3.6-owl15).

Added fallbacks to a permissive license.  Made other minor edits to comments
and the documentation.

Explicitly test crypt_rn() as well, not just via crypt_ra() like we were
testing it before.

Added tests of crypt() and crypt_ra() on setting strings that don't include
full hashes and on incorrect setting strings.

Preserve the requested prefix in bcrypt's crypt_gensalt*(), which was
temporarily not the case in the previous (unreleased) revision of the code.
Thanks to Ludwig Nussel for reporting the problem with mkpasswd that this
caused.  http://www.openwall.com/lists/oss-security/2011/07/07/8

With "$2a$", deviate from the correct algorithm when necessary to prevent easy
collisions with multiple hashes produced by the sign extension buggy algorithm.

Added support for the new "$2y$" prefix indicating known correct bcrypt
algorithm.  (Unfortunately, "$2a$" doesn't actually mean that.)

Moved a portion of the crypt(3) output buffer safety code from wrapper.c to
crypt_blowfish.c such that it protects potential applications that use
crypt_blowfish directly, yet fail to check the return value for NULL.

Added a gcc 3 -Wshadow fix (the warning was spurious, not reported by gcc 4
anymore).

Dropped the unused __fcrypt() function definition.  It matched glibc
crypt-entry.c's, but that one was unused as well, and neither was compiled in
when building the code as part of glibc.

Moved some extern's from wrapper.c to crypt_blowfish.h and crypt_gensalt.h and
included those in the corresponding C files such that the compiler checks
whether the prototypes match the actual definitions.

Removed the __CONST macro in favor of const in C files and __const in the
header file (consistent with glibc's, usable with "gcc -ansi" even with old
versions of gcc).

Added "(void) signum;" to handle_timer() to suppress "gcc -W" warning:
wrapper.c: In function 'handle_timer':
wrapper.c:340:30: warning: unused parameter 'signum'

Added 8-bit test vectors for both "$2a$" and "$2x$" (sign extension bug).

Make crypt_blowfish buildable by modern gcc compilers by moving
fcrypt weak alias definition from crypt-entry.c to wrapper.c

Fixed a compiler warning on systems where ptrdiff_t is not int.

Separate sentences with two spaces in comments.

Use sysconf(_SC_CLK_TCK) instead of CLK_TCK when _SC_CLK_TCK is known to
be available or CLK_TCK is not.  This change only affects -DTEST builds.

crypt_blowfish 0.4.7:

#include <time.h> in wrapper.c's self-test code - for CLK_TCK.

Don't include "-c" in CFLAGS.

Added a test for proper operation with multiple threads.

Use all of the test hashes during benchmark.

Re-test crypt(3) for proper operation during the benchmark.

Initial import of crypt_blowfish-0.4.2 into the CVS tree.

See also: homepages of John the Ripper password cracker, pam_passwdqc password strength checking PAM module, yescrypt KDF and password hashing scheme, crypt_blowfish password hashing framework for C/C++, phpass password hashing framework for PHP, as well as wordlists for password recovery or password cracking.

Hosted by DataForce ISP - Powered by Openwall GNU/*/Linux