<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">In the deprecation efforts for 3.0, I’ve hit something in the DES code that I’d appreciate input on.<div class=""><br class=""></div><div class="">There are two functions (DES_crypt and DES_fcrypt) which implement the old crypt(3) password algorithm. Once these are deprecated, they will no longer be reachable via EVP. The confounding point is that they aren’t quite DES — close but not identical. I would be surprised if they aren’t still in use for /etc/passwd files on old and/or embedded systems.</div><div class=""><br class=""></div><div class=""><div class="">I’ve got several choices:</div><div class=""><ol class=""><li class="">Leave them public and unchanged — that is, don’t deprecate these two functions yet.</li><li class="">Deprecate them and add KDFs to replace them.</li><li class="">Deprecate them, leave them alone and hope they go away painlessly at some point.</li></ol></div><div class=""><br class=""></div><div class="">The apps/password.c applet calls these which is how I stumbled over the complication. I’m fine refactoring this based on the solution chosen. I’d also be okay with factoring out all the password derivation functions into KDFs if necessary.</div><div class=""><br class=""></div><div class=""><br class=""></div><div class="">Thoughts? Other alternatives?</div><div class=""><br class=""></div></div><div class=""><br class=""></div><div class="">Pauli<br class=""><div class="">
<div dir="auto" style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;">-- <br class="">Dr Paul Dale | Distinguished Architect | Cryptographic Foundations <br class="">Phone +61 7 3031 7217<br class="">Oracle Australia</div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><br class=""></div></div></div></div></body></html>