Skip to content

act-user: Use stronger hashing methods in make_crypted() if available.

Björn Esser requested to merge besser82/accountsservice:topic/besser82/yescrypt into master

Most Linux distributions, including Fedora and RHEL 8, are shipping with libxcrypt >= 4.0.

Since that version of libxcrypt the provided family of crypt_gensalt() functions are able to use automatic entropy drawn from secure system ressources, like arc4random(), getentropy() or getrandom(). Those functions can also be used to select the strongenst hash method available in libxcrypt as a default.

Anyways, the settings generated by crypt_gensalt() are always guaranteed to work with the crypt() function.

Signed-off-by: Björn Esser besser82@fedoraproject.org

Edited by Björn Esser

Merge request reports