kernel-packages team mailing list archive

[Dimitri John Ledkov <launchpad@xxxxxxxxxxxx>]

On 28 July 2014 15:02, Dan Quade <1349252@xxxxxxxxxxxxxxxxxx> wrote:
> Using sha-crypt is not a solution. Certain apps are built to use
> crypt(3) only and thus lack Blowfish support. You have 1 day to reopen
> this bug or I will make a new one.
>

In Ubuntu, we typically do not deviate from our upstreams and there
doesn't seem to be a compelling reason to do so here. Thus, consider
filing bug reports / request for Blowfish inclusion upstream and/or to
Debian package maintainers. Once blowfish is accepted in either of
those, such support would also tickle down to Ubuntu.

As to certain apps, they do know that crypt(3) on Linux does not
provide Blowfish thus if blowfish is required there is plenty of
crypto libraries in Ubuntu that provide Blowfish. For example, php
ships it's own implementations and provides Blowfish crypt support and
etc. So, what apps are you concerned about? and how are they broken on
Ubuntu? we can certainly fix those packages.

-- 
Regards,

Dimitri.

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1349252

Title:
  crypt(3) lacks Blowfish support

Status in “glibc” package in Ubuntu:
  Won't Fix
Status in “linux” package in Ubuntu:
  Invalid

Bug description:
  crypt(3) bundled with Ubuntu's GNU C Library supports MD5, DES, SHA256
  and SHA512 hashing methods, but lacks support for Blowfish (aka
  bcrypt).

  There is a patch available from Openwall:
  http://www.openwall.com/crypt/

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/glibc/+bug/1349252/+subscriptions