Re: [Dovecot] bcypt availability

2012-07-17 Thread Timo Sirainen
On 12.7.2012, at 13.32, Nick Edwards wrote: Do you intend to introduce bcrypt into the built in password schemes? No, but I would accept a patch for that.

Re: [Dovecot] bcypt availability

2012-07-16 Thread Noel Butler
On Sun, 2012-07-15 at 11:32 -0700, Robin wrote: Indeed. What I have seen is a create deal of variation in the configuration (/etc/login.defs or your distro's equivalent) in terms of making use of such things. I don't see any added value to bcrypt over iterated SHA-512, really, and

Re: [Dovecot] bcypt availability

2012-07-16 Thread Ed W
On 16/07/2012 11:05, Noel Butler wrote: On Sun, 2012-07-15 at 11:32 -0700, Robin wrote: Indeed. What I have seen is a create deal of variation in the configuration (/etc/login.defs or your distro's equivalent) in terms of making use of such things. I don't see any added value to bcrypt over

Re: [Dovecot] bcypt availability

2012-07-15 Thread Nick Edwards
bump On 7/12/12, Nick Edwards nick.z.edwa...@gmail.com wrote: Dear Timo, Do you intend to introduce bcrypt into the built in password schemes? In lew of all these hacks lately many larger companies appear moving this way, we are looking at it too, but dovecot will then be the weakest link

Re: [Dovecot] bcypt availability

2012-07-15 Thread Ed W
On 7/12/12, Nick Edwards nick.z.edwa...@gmail.com wrote: Dear Timo, Do you intend to introduce bcrypt into the built in password schemes? In lew of all these hacks lately many larger companies appear moving this way, we are looking at it too, but dovecot will then be the weakest link in the

Re: [Dovecot] bcypt availability

2012-07-15 Thread Robin
On 7/15/2012 2:14 AM, Ed W wrote: Interestingly, there doesn't seem to be so much difference between iterated sha-512 (sha512crypt) and bcrypt. Based on looking at latest john the ripper results (although I'm a bit confused because they don't seem to quote the baseline results using the normal

[Dovecot] bcypt availability

2012-07-12 Thread Nick Edwards
Dear Timo, Do you intend to introduce bcrypt into the built in password schemes? In lew of all these hacks lately many larger companies appear moving this way, we are looking at it too, but dovecot will then be the weakest link in the database security. So, are you planning on this and if so