Manual Pages for UNIX Operating System command usage for man crypt_sha256

Standards, Environments, and Macros               crypt_sha256(5)



NAME
     crypt_sha256 - password hashing module using SHA-256 message
     hash algorithm

SYNOPSIS
     /usr/lib/security/$ISA/crypt_sha256.so


DESCRIPTION
     The crypt_sha256 module is a one-way password hashing module
     for  use  with  crypt(3C) that uses the SHA-256 message hash
     algorithm. The algorithm identifier  for  crypt.conf(4)  and
     policy.conf(4) is 5.


     This module is designed to make it difficult to crack  pass-
     words  that use brute force attacks based on high speed SHA-
     256 implementations that use code inlining, unrolled  loops,
     and table lookup.


     The maximum password length for crypt_sha256 is 255  charac-
     ters.


     The following options can be passed to the module  by  means
     of crypt.conf(4):

     rounds=

         Specifies the number of rounds of SHA-256 to use in gen-
         eration  of  the  salt;  the default number of rounds is
         5000. Negative values have no effect  and  are  ignored.
         The minimum number of rounds cannot be below 1000.

         The number of additional rounds is stored  in  the  salt
         string returned by crypt_gensalt(3C). For example:

           $5,rounds=6000$nlxmTTpz$

         When crypt_gensalt(3C) is being used to generate  a  new
         salt,  if  the number of additional rounds configured in
         crypt.conf(4) is greater than that in the old salt,  the
         value  from  crypt.conf(4)  is used instead. This allows
         for migration  to  stronger  (but  more  time-consuming)
         salts on password change.


ATTRIBUTES
     See attributes(5) for descriptions of the  following  attri-
     butes:




SunOS 5.11           Last change: 8 May 2008                    1






Standards, Environments, and Macros               crypt_sha256(5)



     ____________________________________________________________
    |       ATTRIBUTE TYPE        |       ATTRIBUTE VALUE       |
    |_____________________________|_____________________________|
    | Interface Stability         | Committed                   |
    |_____________________________|_____________________________|
    | MT-Level                    | Safe                        |
    |_____________________________|_____________________________|


SEE ALSO
     passwd(1),        crypt(3C),         crypt_genhash_impl(3C),
     crypt_gensalt(3C),                   crypt_gensalt_impl(3C),
     getpassphrase(3C), crypt.conf(4), passwd(4), policy.conf(4),
     attributes(5)









































SunOS 5.11           Last change: 8 May 2008                    2