From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.org/gmane.linux.lib.musl.general/1498 Path: news.gmane.org!not-for-mail From: Rich Felker Newsgroups: gmane.linux.lib.musl.general Subject: Re: crypt* files in crypt directory Date: Thu, 9 Aug 2012 19:33:56 -0400 Message-ID: <20120809233356.GY27715@brightrain.aerifal.cx> References: <20120808022421.GE27715@brightrain.aerifal.cx> <20120808044235.GA22470@openwall.com> <20120808075233.GJ30810@port70.net> <20120808130622.GJ27715@brightrain.aerifal.cx> <20120809015104.GA24515@openwall.com> Reply-To: musl@lists.openwall.com NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Trace: dough.gmane.org 1344555195 21489 80.91.229.3 (9 Aug 2012 23:33:15 GMT) X-Complaints-To: usenet@dough.gmane.org NNTP-Posting-Date: Thu, 9 Aug 2012 23:33:15 +0000 (UTC) To: musl@lists.openwall.com Original-X-From: musl-return-1499-gllmg-musl=m.gmane.org@lists.openwall.com Fri Aug 10 01:33:16 2012 Return-path: Envelope-to: gllmg-musl@plane.gmane.org Original-Received: from mother.openwall.net ([195.42.179.200]) by plane.gmane.org with smtp (Exim 4.69) (envelope-from ) id 1SzcE7-0003MV-Ds for gllmg-musl@plane.gmane.org; Fri, 10 Aug 2012 01:33:15 +0200 Original-Received: (qmail 26124 invoked by uid 550); 9 Aug 2012 23:33:14 -0000 Mailing-List: contact musl-help@lists.openwall.com; run by ezmlm Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: Original-Received: (qmail 26116 invoked from network); 9 Aug 2012 23:33:14 -0000 Content-Disposition: inline In-Reply-To: <20120809015104.GA24515@openwall.com> User-Agent: Mutt/1.5.21 (2010-09-15) Xref: news.gmane.org gmane.linux.lib.musl.general:1498 Archived-At: On Thu, Aug 09, 2012 at 05:51:04AM +0400, Solar Designer wrote: > BTW, the extended DES-based hashes that are already supported in musl > allow for variable iteration counts encoded along with hashes too, and > that's the way it should be. The maximum iteration count the format allows is 2^24-1, which although a bit excessive is still in the range of "sane". It takes 11 seconds to compute on my Atom. Compare this to blowfish count=2^20 taking at least a minute, and therefore count=2^31 (the maximum allowed) taking over 2048 minutes (1.5 days). Rich