#49 Add the yescrypt hashing method for crypt_style configuration.
Merged by thalman. Opened by besser82.
besser82/libuser topic/besser82/yescrypt  into  master

Download 49.patch

The yescrypt hashing method is considered to be much stronger than sha512crypt and fully supported by libxcrypt. It is based on NIST-approved primitives and on par with argon2 in strength.

Fresh installed systems, as well as newly computed hashes for the UNIX shadow file should prefer this method.

See: https://fedoraproject.org/wiki/Changes/yescrypt_as_default_hashing_method_for_shadow

1 new commit added

  • libuser.conf: Use yescrypt as default value for crypt_style.

5 new commits added

  • libuser.conf: Use yescrypt as default value for crypt_style.
  • docs/libuser.conf.5.in: Add yescrypt parameter for crypt_style.
  • lib/util.c: Add yescrypt hashing method for user passwords.
  • lib/util.c: Use crypt_gensalt(), if available in libcrypt.
  • lib/util.c: bcrypt should use $2b$ as prefix for setting.

5 new commits added

  • libuser.conf: Use yescrypt as default value for crypt_style.
  • docs/libuser.conf.5.in: Add yescrypt parameter for crypt_style.
  • lib/util.c: Add yescrypt hashing method for user passwords.
  • lib/util.c: Use crypt_gensalt(), if available in libcrypt.
  • lib/util.c: bcrypt should use $2b$ as prefix for setting.

@jhrozek, @mitr, @thalman: Ping. Any thoughts and/or comments?

5 new commits added

  • libuser.conf: Use yescrypt as default value for crypt_style.
  • docs/libuser.conf.5.in: Add yescrypt parameter for crypt_style.
  • lib/util.c: Add yescrypt hashing method for user passwords.
  • lib/util.c: Use crypt_gensalt(), if available in libcrypt.
  • lib/util.c: bcrypt should use $2b$ as prefix for setting.

5 new commits added

  • libuser.conf: Use yescrypt as default value for crypt_style.
  • docs/libuser.conf.5.in: Add yescrypt parameter for crypt_style.
  • lib/util.c: Add yescrypt hashing method for user passwords.
  • lib/util.c: Use crypt_gensalt(), if available in libcrypt.
  • lib/util.c: bcrypt should use $2b$ as prefix for setting.

From irc query with @thalman at 2021-06-21 ~11:00 UTC, for documentation purposes:

<besser82[m]> Hello Tomas
<besser82[m]> I'm pinging you because of https://pagure.io/libuser/pull-request/49
<besser82[m]> The SWC is likely to be approved today by FESCo: https://pagure.io/fesco/issue/2623
<thalman> Hi
<besser82[m]> Well, I didn't get any feddback whether from you neither jhrozek about it.
<thalman> Sorry, for the delay. I'm now quite busy with other things. But generally I do not object the patch. I will have time to do the review in three weeks.
<thalman> I hope you do not mind.
<besser82[m]> No, that's fine with me, but I need to check the schedule for F35 code-completeness.
<thalman> OK
<besser82[m]> Mass rebuild will be on Wed 2021-07-21, so it would be fine to get things finished and merged until then.
<thalman> That should be OK. I may get to it even earlier but I do not want to promise that.
<besser82[m]> I'm really busy from 07-12 to 07-16, so we hopefully can get that done in the week between 07-05 and 07-09.

Thank you for the patch, ACk

Commit 382d5103 fixes this pull-request

Pull-Request has been merged by thalman

Pull-Request has been merged by thalman

Thank you! =)

Metadata