kroenecker
January 21st, 2007, 12:45 PM
So does Ubuntu still use SHA-1 for password protection?
MrHorus
January 22nd, 2007, 10:30 AM
So does Ubuntu still use SHA-1 for password protection?
If you mean to point out that SHA-1 is considered "broken" then this is old news.
Offhand I am not sure what is used to hash the passwords in Linux and given that I am work i'm not all that keen to Google such a topic and find out but to be honest, it's a moot point.
No matter what algorithm is used to hash the passwords, if an attacker has reached a point where they have been able to get your password file or the shadow file then the game is up and you have already lost, period.
vBulletin® v3.8.1, Copyright ©2000-2009, Jelsoft Enterprises Ltd.