]> git.ipfire.org Git - thirdparty/shadow.git/commit
libmisc/salt.c: Use crypt_gensalt(), if available in libcrypt. 357/head
authorBjörn Esser <besser82@fedoraproject.org>
Tue, 15 Jun 2021 12:23:42 +0000 (14:23 +0200)
committerBjörn Esser <besser82@fedoraproject.org>
Sun, 4 Jul 2021 11:01:22 +0000 (13:01 +0200)
commitea04eb301d08c0c58f1120f87d4ec184d3983ce5
treedf6a08ccdba34a6f7f018792ee2d8adb41f916a1
parentc93897a8d71b9b1790caf3b2dee38dbe62518ae3
libmisc/salt.c: Use crypt_gensalt(), if available in libcrypt.

Most Linux distributions, including Fedora and RHEL 8, are shipping
with libxcrypt >= 4.0.

Since that version of libxcrypt the provided family of crypt_gensalt()
functions are able to use automatic entropy drawn from secure system
ressources, like arc4random(), getentropy() or getrandom().

Anyways, the settings generated by crypt_gensalt() are always
guaranteed to works with the crypt() function.

Using crypt_gensalt() is also needed to make proper use of newer
hashing methods, like yescrypt, provided by libxcrypt.

Signed-off-by: Björn Esser <besser82@fedoraproject.org>
libmisc/salt.c