Originally posted by PPN I am sure that DES encryption uses the first two characters of the password as the salt.
Yep, but the crypt function is smart and will take the whole string and only use what is needed.
On systems that allow alternative crypts like md5 or blowfish, the crypt function must be given the whole password as salt. This allows it to figure out what encryption system is in use and to extract the larger salt from the password.
08-28-2002, 01:44 PM
Threaded Mode