re: MD5 passwd vs. Std crypt

2002-05-14 Thread scott.list
First, thanks again to all for the responses. Summarizing the responses, the gist was that MD5 is more secure, may take more resources, but the big advantage seemed to be that it would take longer than 8 character passwords. I guess that would make a dictionary lookup more difficult because now

Re: MD5 passwd vs. Std crypt

2002-05-13 Thread Anand Buddhdev
On Mon, May 13, 2002 at 04:23:25PM -0500, scott.list wrote: Can someone tell me what the advantage and disadvantages of using MD5 passwords are? MD5 uses the entire length of the password instead of just the first 8 characters, as crypt does. Is it just stronger encryption? Yes. Does it

RE: MD5 passwd vs. Std crypt

2002-05-13 Thread Isaac Liu
MD5 is a message-digest algorithms developed by RSA (Rivest). It is meant for digital signature applications where a large message has to be ``compressed'' in a secure manner before being signed with the private key. It take a message of arbitrary length and produce a 128-bit message digest.

Re: MD5 passwd vs. Std crypt

2002-05-13 Thread John Costello
To add to Anand's answer (in a separate e-mail), MD5 allows you to use passwords that are 256 characters in length. Note: If you have the shipping version of RH 7.2, you should apply the PAM updates to fix a bug with PAM and passwords that are 8 characters. SysAdmin Magazine has an

Re: MD5 passwd vs. Std crypt

2002-05-13 Thread Muhammad Faisal Rauf Danka
--- scott.list [EMAIL PROTECTED] wrote: Can someone tell me what the advantage and disadvantages of using MD5 passwords are? MD5 is more secure than the standard crypt. (advantage) I don't see any (dis-advantage) in being relatively more secure. Is it just stronger encryption? Yes it is. Does