Re: Linux and Security
George Bonser wrote:
> On Wed, 19 Aug 1998, Michael Beattie wrote:
>
> > Okay, true, but it was more of a feasability question, "if you can get the
> > string, is it possible to use the following method to decrypt it??"
>
> Sure ... the login program has to decrypt it, doesn't it? You can
> cut/paste passwd entries between linux systems ... the encrypted password
> is not system-specific.
No, it's not reversable. There is no way to get the original password from
the data in the shadow password file.
Login simply takes the password the user enters, encrypts it using crypt(),
and compares it with that's in the password file. No decryption is done.
--
see shy jo
Reply to: