| 2 |
|
|
| 3 |
|
This is documentation for the mkpasswd.c included in ircd-hybrid. |
| 4 |
|
|
| 5 |
< |
This version of mkpasswd can create DES, Extended DES, BlowFish, MD5, |
| 6 |
< |
SHA-256 and SHA-512 passwords, with either randomly generated or user |
| 7 |
< |
provided salts. |
| 5 |
> |
This version of mkpasswd can create Blowfish, SHA-256 and SHA-512 |
| 6 |
> |
passwords, with either randomly generated or user provided salts. |
| 7 |
|
|
| 8 |
|
Options: |
| 10 |
– |
-6 - Create a SHA-512 password |
| 9 |
|
-5 - Create a SHA-256 password |
| 10 |
< |
-m - Create an MD5 password |
| 11 |
< |
-b - Create a BlowFish password |
| 12 |
< |
-d - Create a DES password |
| 13 |
< |
-e - Create an Extended DES password |
| 14 |
< |
-l - Specify the length of a random MD5 salt |
| 17 |
< |
-r - Specify a number of rounds for a BlowFish or Extended DES password |
| 10 |
> |
-6 - Create a SHA-512 password |
| 11 |
> |
-b - Create a Blowfish password |
| 12 |
> |
-R - Specify a raw salt passed directly to crypt() |
| 13 |
> |
-l - Specify the length of a random SHA-256/SHA-512 or Blowfish salt |
| 14 |
> |
-r - Specify a number of rounds for a Blowfish password |
| 15 |
|
-p - Specify the plaintext password at the command line |
| 16 |
|
-s - Specify the salt at the command line |
| 20 |
– |
-R - Specify a raw salt passed directly to crypt() |
| 17 |
|
-h - Get help |
| 18 |
|
|
| 23 |
– |
If no parameter is given, it will create an MD5 password with a randomly |
| 24 |
– |
generated salt and prompting for the password (without echo). |
| 25 |
– |
|
| 26 |
– |
A DES salt is a pair of alphanumeric characters ('.' and '/' are permitted |
| 27 |
– |
as well), such as 'a4' or 'Td'. |
| 28 |
– |
|
| 29 |
– |
An MD5 salt consists of up to 16 (though most implementations limit you to |
| 30 |
– |
8) alphanumeric characters (plus '.' and '/'), |
| 31 |
– |
such as 'tGd' or 'J6d4dfG'. |
| 32 |
– |
|
| 19 |
|
Known bugs: |
| 34 |
– |
Blowfish (on OpenBSD) is not yet supported |
| 20 |
|
The encryption algorithms supported depend on your system's crypt() |
| 21 |
< |
implementation. |
| 37 |
< |
The maximum length of an MD5 salt is limited to your system's crypt() |
| 38 |
< |
implementation, typically 8. |
| 21 |
> |
implementation. |
| 22 |
|
|
| 23 |
|
Supported Platforms (Known and tested): |
| 24 |
< |
Linux glibc (SHA-256/SHA-512 since glibc 2.7, DES and MD5) |
| 25 |
< |
FreeBSD 3.x (DES (MD5 maybe)) |
| 26 |
< |
FreeBSD 4.x (DES and MD5) |
| 44 |
< |
Solaris 2.5-2.6 (DES only) |
| 45 |
< |
Cygwin 1.1.4 (DES only) |
| 46 |
< |
Prior Cygwin with the MD5 libcrypt (MD5 only) |
| 47 |
< |
OpenBSD 2.7 (don't link with -lcrypt) (DES and MD5, no Blowfish support) |
| 48 |
< |
Mac OS-X (Darwin) (don't link with -lcrypt) (DES only) |
| 24 |
> |
Linux glibc 2.7+ (SHA-256/SHA-512) |
| 25 |
> |
FreeBSD 10.2 (SHA-256/SHA-512, Blowfish) |
| 26 |
> |
OpenBSD 5.8 (Blowfish) |
| 27 |
|
|
| 28 |
|
Other systems probably work, but they haven't been amply tested. |
