https://wiki.archlinux.org/api.php?hidebots=1&days=30&limit=50&hidecategorization=1&target=User%3AFilam&action=feedrecentchanges&feedformat=atom
ArchWiki - Changes related to "User:Filam" [en]
2024-03-29T12:52:05Z
Related changes
MediaWiki 1.41.0
https://wiki.archlinux.org/index.php?title=SHA_password_hashes&diff=802930&oldid=802927
SHA password hashes
2024-03-10T23:52:03Z
<p>adjust redirect target for backlinks prior to move to <a href="/title/SHA_hashes" title="SHA hashes">SHA hashes</a></p>
<table style="background-color: #fff; color: #202122;" data-mw="interface">
<col class="diff-marker" />
<col class="diff-content" />
<col class="diff-marker" />
<col class="diff-content" />
<tr class="diff-title" lang="en">
<td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Older revision</td>
<td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Revision as of 23:52, 10 March 2024</td>
</tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l1">Line 1:</td>
<td colspan="2" class="diff-lineno">Line 1:</td></tr>
<tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>#REDIRECT [[SHA hashes]]</div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>#REDIRECT [[SHA <ins style="font-weight: bold; text-decoration: none;">hashes#SHA password </ins>hashes]]</div></td></tr>
</table>
Indigo
https://wiki.archlinux.org/index.php?title=SHA_password_hashes&diff=802926&oldid=801648
SHA password hashes
2024-03-10T23:48:49Z
<p><a href="/title/User:Indigo" class="mw-userlink" title="User:Indigo"><bdi>Indigo</bdi></a> moved page <a href="/index.php?title=SHA_password_hashes&redirect=no" class="mw-redirect" title="SHA password hashes">SHA password hashes</a> to <a href="/title/SHA_hashes" title="SHA hashes">SHA hashes</a> more universal title for widely used function; see also <a href="/title/Special:Diff/801648" title="Special:Diff/801648">Special:diff/801648</a> edit summary</p>
<table style="background-color: #fff; color: #202122;" data-mw="interface">
<col class="diff-marker" />
<col class="diff-content" />
<col class="diff-marker" />
<col class="diff-content" />
<tr class="diff-title" lang="en">
<td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Older revision</td>
<td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Revision as of 23:48, 10 March 2024</td>
</tr><tr><td colspan="4" class="diff-multi" lang="en">(19 intermediate revisions by the same user not shown)</td></tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l6">Line 6:</td>
<td colspan="2" class="diff-lineno">Line 6:</td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>{{Move|SHA hashes|With yescrypt new password hash default, the information about SHA password hashes can be condensed and denoted into a section to provide legacy support to link from [[Security#Password hashes]] for SHA. Since the wiki lacks basic info about general SHA hash functionality, which will stay relevant for various other integrity purposes, it should be added in a new section.}}</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>{{Move|SHA hashes|With yescrypt new password hash default, the information about SHA password hashes can be condensed and denoted into a section to provide legacy support to link from [[Security#Password hashes]] for SHA. Since the wiki lacks basic info about general SHA hash functionality, which will stay relevant for various other integrity purposes, it should be added in a new section.}}</div></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr>
<tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>The [[Wikipedia:Secure Hash Algorithms|Secure Hash Algorithms]] (SHA) are a set of [[Wikipedia:Cryptographic_hash_function|hash functions]] <del style="font-weight: bold; text-decoration: none;">often </del>used <del style="font-weight: bold; text-decoration: none;">to hash passwords. By default Arch uses SHA-512 </del>for <del style="font-weight: bold; text-decoration: none;">passwords, but some systems may still be using the older </del>[[<del style="font-weight: bold; text-decoration: none;">Wikipedia</del>:<del style="font-weight: bold; text-decoration: none;">MD5</del>|<del style="font-weight: bold; text-decoration: none;">MD5</del>]] <del style="font-weight: bold; text-decoration: none;">algorithm. This article describes how to increase password security</del>.</div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>The [[Wikipedia:Secure Hash Algorithms|Secure Hash Algorithms]] (SHA) are a set of [[Wikipedia:Cryptographic_hash_function|hash functions]]<ins style="font-weight: bold; text-decoration: none;">, frequently </ins>used for <ins style="font-weight: bold; text-decoration: none;">a large variety of </ins>[[<ins style="font-weight: bold; text-decoration: none;">wikipedia</ins>:<ins style="font-weight: bold; text-decoration: none;">Cryptographic_hash_function#Applications</ins>|<ins style="font-weight: bold; text-decoration: none;">purposes</ins>]].</div></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr>
<tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">== Benefits </del>of SHA-<del style="font-weight: bold; text-decoration: none;">2 over MD5 ==</del></div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">Some examples </ins>of <ins style="font-weight: bold; text-decoration: none;">usage of the </ins>SHA <ins style="font-weight: bold; text-decoration: none;">hash functions in Arch Linux are:</ins></div></td></tr>
<tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">* Verifying the integrity of the [https://archlinux.org/download/#checksums Arch Linux ISO] and [[PKGBUILD#Integrity|packages]],</ins></div></td></tr>
<tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">* Pinning software revisions with [[Git#Revision selection|git]],</ins></div></td></tr>
<tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">* Securing and verifying cryptographic keys, for example [[Dm</ins>-<ins style="font-weight: bold; text-decoration: none;">crypt/Device_encryption#Encryption_options_for_LUKS_mode|disc encryption]],</ins></div></td></tr>
<tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">* Data integrity and resource management of file systems, for example [[Btrfs#Scrub|btrfs]], and</ins></div></td></tr>
<tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">* Password verification, covered in [[Security#Password hashes]] and this article for SHA hashes.</ins></div></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr>
<tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">{{Style|This section should perhaps be pruned and merged with article summary.}}</del></div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">== SHA password hashes ==</ins></div></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr>
<tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">In </del>Linux <del style="font-weight: bold; text-decoration: none;">distributions login </del>passwords <del style="font-weight: bold; text-decoration: none;">are commonly hashed and stored in the </del>{{<del style="font-weight: bold; text-decoration: none;">ic</del>|<del style="font-weight: bold; text-decoration: none;">/etc/</del>shadow}} <del style="font-weight: bold; text-decoration: none;">file using </del>the [[Wikipedia:MD5|MD5 <del style="font-weight: bold; text-decoration: none;">algorithm</del>]]<del style="font-weight: bold; text-decoration: none;">. The security of the MD5 </del>hash function has been <del style="font-weight: bold; text-decoration: none;">severely </del>compromised by [[Wikipedia:MD5#Collision_vulnerabilities|collision vulnerabilities]]. <del style="font-weight: bold; text-decoration: none;">This does not mean MD5 is insecure </del>for <del style="font-weight: bold; text-decoration: none;">password hashing but in the interest of decreasing vulnerabilities a </del>more <del style="font-weight: bold; text-decoration: none;">secure and robust algorithm that has no known weaknesses (e.g. SHA-512) is recommended</del>.</div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">By default Arch </ins>Linux <ins style="font-weight: bold; text-decoration: none;">used [[wikipedia:SHA-2|SHA-512]] for </ins>passwords <ins style="font-weight: bold; text-decoration: none;">with package </ins>{{<ins style="font-weight: bold; text-decoration: none;">pkg</ins>|shadow}} <ins style="font-weight: bold; text-decoration: none;">releases from 4.1.4.3-3 (see [https://bugs.archlinux.org/task/13591#comment85993 bug 13591]) to 4.14.0 (see [https://archlinux.org/news/changes-to-default-password-hashing-algorithm-and-umask-settings/ yescrypt ]). It replaced </ins>the <ins style="font-weight: bold; text-decoration: none;">older </ins>[[Wikipedia:MD5|MD5]] hash function<ins style="font-weight: bold; text-decoration: none;">, which </ins>has been <ins style="font-weight: bold; text-decoration: none;">found </ins>compromised by [[Wikipedia:MD5#Collision_vulnerabilities|collision vulnerabilities]]. <ins style="font-weight: bold; text-decoration: none;">See [[wikipedia:Secure Hash Algorithms#Comparison of SHA functions]] </ins>for more <ins style="font-weight: bold; text-decoration: none;">information</ins>.</div></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr>
<tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">The following tutorial uses the SHA-512 hash function, which has been recommended by the United States' National Security Agency (NSA) for Red Hat Enterprise Linux 5. Alternatively, [[Wikipedia:SHA-2|SHA-2]] consists of four additional hash functions with digests that are 224, 256, 384, and 512 bits.</del></div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">=== Configuration ===</ins></div></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr>
<tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>== <del style="font-weight: bold; text-decoration: none;">Increasing security </del>==</div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">The SHA-512 password hashing can be configured with the </ins></div></td></tr>
<tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">{{ic|1</ins>=<ins style="font-weight: bold; text-decoration: none;">rounds</ins>=<ins style="font-weight: bold; text-decoration: none;">N}} option to improve [[Wikipedia:Key stretching|key strengthening]]. For example, {{ic|1</ins>=<ins style="font-weight: bold; text-decoration: none;">rounds</ins>=<ins style="font-weight: bold; text-decoration: none;">65536}} means that an attacker has to compute 65536 hashes for each password they test against the hash in the {{ic|/etc/shadow}} password file.</ins></div></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr>
<tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">{{Style|The notes and structure </del>of <del style="font-weight: bold; text-decoration: none;">this section lack focus and clarity</del>.<del style="font-weight: bold; text-decoration: none;">}}</del></div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">Therefore the attacker will be delayed by a factor </ins>of <ins style="font-weight: bold; text-decoration: none;">65536</ins>. <ins style="font-weight: bold; text-decoration: none;">This also means that your computer must compute </ins>65536 <ins style="font-weight: bold; text-decoration: none;">hashes every time you log in</ins>, <ins style="font-weight: bold; text-decoration: none;">but even on slow computers that takes less than one second</ins>.</div></td></tr>
<tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">{{out of date|[https://archlinux.org/news/changes-to-default-password-hashing-algorithm-and-umask-settings/ yescrypt] has replaced sha512. Since PAM 1.6.0 {{ic|/etc/login.defs}} are default to configure {{ic|YESCRYPT_COST_FACTOR}}, though rounds can still be used alternatively.[https://github.com/linux-pam/linux-pam/pull/642/commits/8d082da1bc993b5b061ae81a9743891328e04ce6] If a custom {{ic|1=rounds=</del>65536<del style="font-weight: bold; text-decoration: none;">}} value was set for sha512 prior without making it explicit custom hash</del>, <del style="font-weight: bold; text-decoration: none;">the default hash change to yescrypt may lead to the rounds being interpreted by pam.[https://github.com/linux-pam/linux-pam/blob/1e2c6cecf81dcaeea0c2c9d37bc35eea120cd77d/modules/pam_unix/support</del>.<del style="font-weight: bold; text-decoration: none;">c#L222]}}</del></div></td><td colspan="2" class="diff-side-added"></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr>
<tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>{{<del style="font-weight: bold; text-decoration: none;">Note</del>|1<del style="font-weight: bold; text-decoration: none;">=With </del>{{<del style="font-weight: bold; text-decoration: none;">pkg</del>|<del style="font-weight: bold; text-decoration: none;">shadow</del>}} <del style="font-weight: bold; text-decoration: none;">4</del>.<del style="font-weight: bold; text-decoration: none;">1</del>.<del style="font-weight: bold; text-decoration: none;">4</del>.<del style="font-weight: bold; text-decoration: none;">3-3 ''sha512'' is the default for new passwords (see </del>[https://<del style="font-weight: bold; text-decoration: none;">bugs</del>.<del style="font-weight: bold; text-decoration: none;">archlinux.org</del>/<del style="font-weight: bold; text-decoration: none;">task</del>/<del style="font-weight: bold; text-decoration: none;">13591#comment85993 bug 13591</del>]<del style="font-weight: bold; text-decoration: none;">).}}</del></div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">Since </ins>{{<ins style="font-weight: bold; text-decoration: none;">pkg</ins>|<ins style="font-weight: bold; text-decoration: none;">pam}} release </ins>1<ins style="font-weight: bold; text-decoration: none;">.6.0 the SHA-512 </ins>{{<ins style="font-weight: bold; text-decoration: none;">ic</ins>|<ins style="font-weight: bold; text-decoration: none;">rounds</ins>}} <ins style="font-weight: bold; text-decoration: none;">option can be configured by either editing the {{ic|/etc/login</ins>.<ins style="font-weight: bold; text-decoration: none;">defs}} file and setting an value for the {{ic|SHA_CRYPT_MAX_ROUNDS}} parameter, or editing {{ic|/etc/pam</ins>.<ins style="font-weight: bold; text-decoration: none;">d/passwd}} and adding the {{ic|rounds}} with an appropriate value</ins>.[https://<ins style="font-weight: bold; text-decoration: none;">github</ins>.<ins style="font-weight: bold; text-decoration: none;">com/linux-pam/linux-pam/pull/642</ins>/<ins style="font-weight: bold; text-decoration: none;">commits</ins>/<ins style="font-weight: bold; text-decoration: none;">8d082da1bc993b5b061ae81a9743891328e04ce6</ins>]</div></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr>
<tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>If <del style="font-weight: bold; text-decoration: none;">your current password was created with </del>{{<del style="font-weight: bold; text-decoration: none;">pkg</del>|<del style="font-weight: bold; text-decoration: none;">shadow</del>}} <del style="font-weight: bold; text-decoration: none;">version prior to 4.1.4</del>.<del style="font-weight: bold; text-decoration: none;">3-3 (2011</del>-<del style="font-weight: bold; text-decoration: none;">11</del>-<del style="font-weight: bold; text-decoration: none;">26) you are using MD5</del>. <del style="font-weight: bold; text-decoration: none;">To start using a SHA</del>-<del style="font-weight: bold; text-decoration: none;">512 hash you just need </del>to <del style="font-weight: bold; text-decoration: none;">change your password with ''passwd''</del>.</div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>If <ins style="font-weight: bold; text-decoration: none;">you do not use the </ins>{{<ins style="font-weight: bold; text-decoration: none;">ic</ins>|<ins style="font-weight: bold; text-decoration: none;">rounds</ins>}} <ins style="font-weight: bold; text-decoration: none;">option, PAM will use a [https://github</ins>.<ins style="font-weight: bold; text-decoration: none;">com/linux</ins>-<ins style="font-weight: bold; text-decoration: none;">pam/linux</ins>-<ins style="font-weight: bold; text-decoration: none;">pam/blob/1e2c6cecf81dcaeea0c2c9d37bc35eea120cd77d/modules/pam_unix/support</ins>.<ins style="font-weight: bold; text-decoration: none;">c#L222</ins>-<ins style="font-weight: bold; text-decoration: none;">L241C15 default] different </ins>to <ins style="font-weight: bold; text-decoration: none;">the commented {{ic|5000}} default in {{ic|/etc/login.defs}}</ins>.</div></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr>
<tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>{{<del style="font-weight: bold; text-decoration: none;">Note</del>|<del style="font-weight: bold; text-decoration: none;">You must have root privileges to edit this file</del>.}}</div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">For example:</ins></div></td></tr>
<tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>{{<ins style="font-weight: bold; text-decoration: none;">hc</ins>|<ins style="font-weight: bold; text-decoration: none;">/etc/pam</ins>.<ins style="font-weight: bold; text-decoration: none;">d/passwd|password required pam_unix.so sha512 shadow nullok '''rounds{{=}}65536'''</ins></div></td></tr>
<tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>}}</div></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr>
<tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">The </del>{{<del style="font-weight: bold; text-decoration: none;">ic|1=rounds=N}} option helps to improve [[Wikipedia:Key stretching</del>|<del style="font-weight: bold; text-decoration: none;">key strengthening]]. The number of rounds has a larger impact on security than the selection of </del>a hash <del style="font-weight: bold; text-decoration: none;">function. For example, </del>{{ic|<del style="font-weight: bold; text-decoration: none;">1=rounds=65536</del>}} <del style="font-weight: bold; text-decoration: none;">means that an attacker has to compute 65536 hashes for each password they test against the hash </del>in <del style="font-weight: bold; text-decoration: none;">your {{ic|/etc/shadow}}. Therefore the attacker will be delayed by a factor of 65536. This also means that your computer must compute 65536 hashes every time you log in, but even on slow computers that takes less than 1 second. If you do not use </del>the {{ic|<del style="font-weight: bold; text-decoration: none;">rounds</del>}} <del style="font-weight: bold; text-decoration: none;">option, then glibc will </del>''<del style="font-weight: bold; text-decoration: none;">'default''' to '''5000'</del>'' <del style="font-weight: bold; text-decoration: none;">rounds for SHA-512. Additionally, the default value for the {{ic|rounds}} option can be found in {{ic|sha512-crypt</del>.<del style="font-weight: bold; text-decoration: none;">c</del>}}<del style="font-weight: bold; text-decoration: none;">.</del></div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>{{<ins style="font-weight: bold; text-decoration: none;">warning</ins>|<ins style="font-weight: bold; text-decoration: none;">Explicitly configuring </ins>a hash <ins style="font-weight: bold; text-decoration: none;">like </ins>{{ic|<ins style="font-weight: bold; text-decoration: none;">sha512</ins>}} in <ins style="font-weight: bold; text-decoration: none;">above example overrides </ins>the <ins style="font-weight: bold; text-decoration: none;">default </ins>{{ic|<ins style="font-weight: bold; text-decoration: none;">yescrypt</ins>}} <ins style="font-weight: bold; text-decoration: none;">hash for subsequent </ins>''<ins style="font-weight: bold; text-decoration: none;">passwd</ins>'' <ins style="font-weight: bold; text-decoration: none;">invocations</ins>.}}</div></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr>
<tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">Open </del>{{ic|/etc/pam.d/passwd}} <del style="font-weight: bold; text-decoration: none;">with a text editor and add </del>the {{<del style="font-weight: bold; text-decoration: none;">ic</del>|<del style="font-weight: bold; text-decoration: none;">rounds</del>}} <del style="font-weight: bold; text-decoration: none;">option at the end of of the uncommented line</del>. <del style="font-weight: bold; text-decoration: none;">After applying this change the line should look like this:</del></div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">For a more detailed explanation of the </ins>{{ic|/etc/pam.d/passwd}} <ins style="font-weight: bold; text-decoration: none;">password options check </ins>the {{<ins style="font-weight: bold; text-decoration: none;">man|8</ins>|<ins style="font-weight: bold; text-decoration: none;">pam_unix</ins>}} <ins style="font-weight: bold; text-decoration: none;">man page</ins>.</div></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr>
<tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;"> password required pam_unix.so sha512 shadow nullok '''rounds</del>=<del style="font-weight: bold; text-decoration: none;">65536'''</del></div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>=== <ins style="font-weight: bold; text-decoration: none;">Usage =</ins>==</div></td></tr>
<tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div> </div></td><td colspan="2" class="diff-side-added"></td></tr>
<tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">{{note|For a more detailed explanation of the {{ic|/etc/pam.d/passwd}} password options check the {{man|8|pam_unix}} man page.}}</del></div></td><td colspan="2" class="diff-side-added"></td></tr>
<tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div> </div></td><td colspan="2" class="diff-side-added"></td></tr>
<tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>== <del style="font-weight: bold; text-decoration: none;">Re-hash the passwords </del>==</div></td><td colspan="2" class="diff-side-added"></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>Even though you have changed the encryption settings, your passwords are not automatically re-hashed. To fix this, you must reset all user passwords so that they can be re-hashed.</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>Even though you have changed the encryption settings, your passwords are not automatically re-hashed. To fix this, you must reset all user passwords so that they can be re-hashed.</div></td></tr>
<tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l45">Line 45:</td>
<td colspan="2" class="diff-lineno">Line 48:</td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>where {{ic|''username''}} is the name of the user whose password you are changing. Then re-enter their current password, and it will be re-hashed.</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>where {{ic|''username''}} is the name of the user whose password you are changing. Then re-enter their current password, and it will be re-hashed.</div></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr>
<tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>To verify that your passwords have been re-hashed, check the {{ic|/etc/shadow}} file as root. Passwords hashed with SHA-256 <del style="font-weight: bold; text-decoration: none;">should </del>begin with a {{ic|$5}} <del style="font-weight: bold; text-decoration: none;">and </del>passwords hashed with SHA-512 will begin with {{ic|$6}}.</div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>To verify that your passwords have been re-hashed, check the {{ic|/etc/shadow}} file as root. Passwords hashed with SHA-256 begin with a {{ic|$5}}<ins style="font-weight: bold; text-decoration: none;">, </ins>passwords hashed with SHA-512 will begin with {{ic|$6<ins style="font-weight: bold; text-decoration: none;">}} and yescrypt hashes with {{ic|$y</ins>}}.</div></td></tr>
</table>
Indigo
https://wiki.archlinux.org/index.php?title=ArchWiki:Maintenance_Team&diff=801716&oldid=801683
ArchWiki:Maintenance Team
2024-02-29T19:14:50Z
<p><span dir="auto"><span class="autocomment">Active maintainers: </span> add myself (less than 10 edits in last 30 days, but was just promoted)</span></p>
<table style="background-color: #fff; color: #202122;" data-mw="interface">
<col class="diff-marker" />
<col class="diff-content" />
<col class="diff-marker" />
<col class="diff-content" />
<tr class="diff-title" lang="en">
<td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Older revision</td>
<td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Revision as of 19:14, 29 February 2024</td>
</tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l47">Line 47:</td>
<td colspan="2" class="diff-lineno">Line 47:</td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>|-</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>|-</div></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>| [[User:Kynikos|Kynikos]] ([[User talk:Kynikos|talk]]) || Dario Giovannetti || administrator, bureaucrat || [[Special:EmailUser/Kynikos|dario<span style="display:none;"> {nospam} </span>gio<span style="display:none;display:inherit;">va&#64;gm</span>ai<span style="display:none;"> {nospam} </span>l&#46;com]]</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>| [[User:Kynikos|Kynikos]] ([[User talk:Kynikos|talk]]) || Dario Giovannetti || administrator, bureaucrat || [[Special:EmailUser/Kynikos|dario<span style="display:none;"> {nospam} </span>gio<span style="display:none;display:inherit;">va&#64;gm</span>ai<span style="display:none;"> {nospam} </span>l&#46;com]]</div></td></tr>
<tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">|-</ins></div></td></tr>
<tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">| [[User:CodingKoopa|CodingKoopa]] ([[User talk:CodingKoopa|talk]]) || || || See [[User:CodingKoopa#Contact]]</ins></div></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>|}</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>|}</div></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr>
<!-- diff cache key archwiki:diff:1.41:old-801683:rev-801716:php=table -->
</table>
CodingKoopa
https://wiki.archlinux.org/index.php?title=ArchWiki:Maintenance_Team&diff=801683&oldid=800880
ArchWiki:Maintenance Team
2024-02-29T09:56:22Z
<p><span dir="auto"><span class="autocomment">Active maintainers: </span> add myself</span></p>
<table style="background-color: #fff; color: #202122;" data-mw="interface">
<col class="diff-marker" />
<col class="diff-content" />
<col class="diff-marker" />
<col class="diff-content" />
<tr class="diff-title" lang="en">
<td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Older revision</td>
<td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Revision as of 09:56, 29 February 2024</td>
</tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l37">Line 37:</td>
<td colspan="2" class="diff-lineno">Line 37:</td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>|-</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>|-</div></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>| [[User:Erus_Iluvatar|Erus_Iluvatar]] ([[User talk:Erus_Iluvatar|talk]]) || Vladimir LAVALLADE || administrator || See [[User:Erus Iluvatar#Contact]]</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>| [[User:Erus_Iluvatar|Erus_Iluvatar]] ([[User talk:Erus_Iluvatar|talk]]) || Vladimir LAVALLADE || administrator || See [[User:Erus Iluvatar#Contact]]</div></td></tr>
<tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">|-</ins></div></td></tr>
<tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">| [[User:andreymal|andreymal]] ([[User talk:andreymal|talk]]) || Andrey Kashlak || || [[Special:EmailUser/andreymal|Send Email]]</ins></div></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>|-</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>|-</div></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>| [[User:nl6720|nl6720]] ([[User talk:nl6720|talk]]) || || administrator, bureaucrat || [[Special:EmailUser/nl6720|Send Email]]</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>| [[User:nl6720|nl6720]] ([[User talk:nl6720|talk]]) || || administrator, bureaucrat || [[Special:EmailUser/nl6720|Send Email]]</div></td></tr>
<!-- diff cache key archwiki:diff:1.41:old-800880:rev-801683:php=table -->
</table>
Andreymal
https://wiki.archlinux.org/index.php?title=SHA_password_hashes&diff=801648&oldid=800274
SHA password hashes
2024-02-28T22:21:44Z
<p>replace merge with move target; when updating <a href="/title/Security#Password_hashes" title="Security">Security#Password hashes</a> I came to the conclusion most info is not relevant anymore for it. since this article comes first for the "hash" search term, it appears better to adds a basic section for it and move as described. SHA password hashes are a good second section to crosslink to; this article also has a few backlinks, which make merging to <a href="/title/Security" title="Security">Security</a> difficult without loosing the info they refer to</p>
<table style="background-color: #fff; color: #202122;" data-mw="interface">
<col class="diff-marker" />
<col class="diff-content" />
<col class="diff-marker" />
<col class="diff-content" />
<tr class="diff-title" lang="en">
<td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Older revision</td>
<td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Revision as of 22:21, 28 February 2024</td>
</tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l4">Line 4:</td>
<td colspan="2" class="diff-lineno">Line 4:</td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>{{Related|Security#Password hashes}}</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>{{Related|Security#Password hashes}}</div></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>{{Related articles end}}</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>{{Related articles end}}</div></td></tr>
<tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>{{<del style="font-weight: bold; text-decoration: none;">Merge</del>|<del style="font-weight: bold; text-decoration: none;">Security#Password </del>hashes|<del style="font-weight: bold; text-decoration: none;">Not enough content for a separate article. The </del>default <del style="font-weight: bold; text-decoration: none;">configuration via {{ic|/etc/login.defs}} </del>can <del style="font-weight: bold; text-decoration: none;">perhaps </del>be <del style="font-weight: bold; text-decoration: none;">split-merged </del>to [[<del style="font-weight: bold; text-decoration: none;">Users and groups</del>#<del style="font-weight: bold; text-decoration: none;">Shadow</del>]] which <del style="font-weight: bold; text-decoration: none;">owns </del>it.}}</div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>{{<ins style="font-weight: bold; text-decoration: none;">Move</ins>|<ins style="font-weight: bold; text-decoration: none;">SHA </ins>hashes|<ins style="font-weight: bold; text-decoration: none;">With yescrypt new password hash </ins>default<ins style="font-weight: bold; text-decoration: none;">, the information about SHA password hashes </ins>can be <ins style="font-weight: bold; text-decoration: none;">condensed and denoted into a section </ins>to <ins style="font-weight: bold; text-decoration: none;">provide legacy support to link from </ins>[[<ins style="font-weight: bold; text-decoration: none;">Security</ins>#<ins style="font-weight: bold; text-decoration: none;">Password hashes</ins>]] <ins style="font-weight: bold; text-decoration: none;">for SHA. Since the wiki lacks basic info about general SHA hash functionality, </ins>which <ins style="font-weight: bold; text-decoration: none;">will stay relevant for various other integrity purposes, </ins>it <ins style="font-weight: bold; text-decoration: none;">should be added in a new section</ins>.}}</div></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>The [[Wikipedia:Secure Hash Algorithms|Secure Hash Algorithms]] (SHA) are a set of [[Wikipedia:Cryptographic_hash_function|hash functions]] often used to hash passwords. By default Arch uses SHA-512 for passwords, but some systems may still be using the older [[Wikipedia:MD5|MD5]] algorithm. This article describes how to increase password security.</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>The [[Wikipedia:Secure Hash Algorithms|Secure Hash Algorithms]] (SHA) are a set of [[Wikipedia:Cryptographic_hash_function|hash functions]] often used to hash passwords. By default Arch uses SHA-512 for passwords, but some systems may still be using the older [[Wikipedia:MD5|MD5]] algorithm. This article describes how to increase password security.</div></td></tr>
<!-- diff cache key archwiki:diff:1.41:old-800274:rev-801648:php=table -->
</table>
Indigo