Re: crypt() on OpenBSD

[Niels Provos <provos@citi.umich.edu>]

In message <Pine.GSO.4.05.9907272022290.21610-100000@ns.kyrnet.kg>, CyberPsycho
tic writes:
>I would assume that the salt here is still first X digits (so you're
>probably supposed to pass version algorythm, and number of rounds along the
>salt. Correct me if I am wrong.
This is correct, the crypt(3) manpage actually says that, in maybe a
way that could be improved upon:

     The version number, the logarithm of the number of rounds and the con-
     catenation of salt and hashed password are separated by the ``$'' charac-
     ter. An encoded ``8'' would specify 256 rounds.  A valid Blowfish pass-
     word looks like this:

     ``$2a$12$eIAq8PR8sIUnJ1HaohxX2O9x9Qlm2vK97LJ5dsXdmB.eXF42qjchC''.

     The whole Blowfish password string is passed as setting for interpreta-
     tion.

Niels.