4 ms·
How is the root password hashed these days? Does it use some "slow" hash like bcrypt, for example? About 10 years ago a GPU-assisted tool could grind through s
by moring 4y ago
How is the root password hashed these days? Does it use some "slow" hash like bcrypt, for example?
About 10 years ago a GPU-assisted tool could grind through several hundred million passwords per second to find the cleartext to a hash. That + dictionary + patterns could un-hash a lot of passwords very fast (md5 back then).
- scandinavian 4y agoI think the default for a lot of distros is crypt() with id 6, which is SHA-512. The default number of rounds is often 5000. I just checked one of my debian machines, and it appears Debian 11 has switched to something called yescrypt.