[ale] FW: more info on crypt.

[Chris Fowler]

I will 
chage all my programs to only support passwords of 8 
characters.
<SPAN 
class=857213015-29032001>Â 
<SPAN 
class=857213015-29032001>Â 

  <FONT face=Tahoma 
  size=2>-----Original Message-----From: Bao Ha 
  [mailto:baoh at linuxwizardry.com]Sent: Thursday, March 29, 2001 10:19 
  AMTo: ale at ale.orgSubject: RE: [ale] FW: more info on 
  crypt. 
  Your 
  crypt library is using DES, which only uses the first 8 characters as 
  its
  <SPAN 
  class=593332215-29032001>salt.  MD5 will allow up to 32 characters, I 
  believe.
  <SPAN 
  class=593332215-29032001>Â 
  <SPAN 
  class=593332215-29032001>Bao
  <BLOCKQUOTE 
  style="BORDER-LEFT: #0000ff 2px solid; MARGIN-LEFT: 5px; MARGIN-RIGHT: 0px; PADDING-LEFT: 5px">
    <FONT face=Tahoma 
    size=2>-----Original Message-----From: owner-ale at ale.org 
    [mailto:owner-ale at ale.org]On Behalf Of Chris FowlerSent: 
    Thursday, March 29, 2001 9:35 AMTo: 
    'ale at ale.org'Subject: [ale] FW: more info on crypt. 
    
    Below is code and output of 2 executions 
    Run 1: You entered: password 
    It was encrypted to: ctmNrZ7a6zlUA <FONT 
    size=2>The correct password is: ctmNrZ7a6zlUA <FONT 
    size=2>Correct! 
    Run 2: You entered: 
    password12345 It was encrypted to: 
    ctmNrZ7a6zlUA The correct password is: 
    ctmNrZ7a6zlUA Correct! 
    --------- test.c ----------------- <FONT 
    size=2>#include <unistd.h> 
    #define PASSWORD "ctmNrZ7a6zlUA" 
    int main(void) <FONT 
    size=2>{ Â Â Â Â Â Â Â  <FONT 
    size=2>char password[32]; 
    Â Â Â Â Â Â Â  char 
    *encrypted; 
    Â Â Â Â Â Â Â  printf("password: 
    "); Â Â Â Â Â Â Â  <FONT 
    size=2>scanf("%32s", password); 
    Â Â Â Â Â Â Â  encrypted = 
    crypt(password, PASSWORD); 
    Â Â Â Â Â Â Â  // DEBUG 
    Â Â Â Â Â Â Â  printf("You 
    entered: %s\n", password); 
    Â Â Â Â Â Â Â  printf("It was 
    encrypted to: %s\n", encrypted); 
    Â Â Â Â Â Â Â  printf("The 
    correct password is: %s\n", PASSWORD); 
    Â Â Â Â Â Â Â  // END 
    DEBUG 
    Â Â Â Â Â Â Â  if 
    (strcmp(encrypted, PASSWORD) == 0) 
    Â Â Â Â Â Â Â  
    Â Â Â Â Â Â Â  <FONT 
    size=2>printf("Correct!\n"); 
    Â Â Â Â Â Â Â  else 
    Â Â Â Â Â Â Â  
    Â Â Â Â Â Â Â  <FONT 
    size=2>printf("Incorrect!\n"); 
    Â Â Â Â Â Â Â  return 0; 
    } 
    Â Â Â Â Â Â Â