Re: Values to use for a salt?

> How does an md5 crypt style hash store the salt? ie. the password hashes
> that begin with $1$
> If you use a large salt such as 32 characters does the entire salt get used
> or only a part of it?

DES-based crypt uses a salt that's the first two chars of
the hashed passwd:

        UWOluFloQB3BI           salt is UW


Other unix crypt methods indicate which kind of hash
is being used between the first set of $ signs, the
salt between the next set, and the resulting hash at
the end.

        $1$2vW1uUxa$YKbRhlaRFsXJuEwjwvGEQ1

        type is md5 (from the '$1$' part)
        Salt is 2vW1uUxa
        Resulting hash is YKbRhlaRFsXJuEwjwvGEQ1




--
Brian Hatch                  I don't speak for
   Systems and                anyone else.  I
   Security Engineer          do speak to
http://www.ifokr.org/bri/     myself though.

Every message PGP signed

pgpYlwb8Bv0Y7.pgp
Description: PGP signature