topic Re: Password Encryption in Operating System - HP-UX

Password Encryption

Joyce S. Solomon_1 — Thu, 03 Oct 2002 02:33:58 GMT

Hi All,

Hav a question here, thanks in advance.

Is the password which is transferred in HP UX is one way or two ways encrypted?

Thanks

Re: Password Encryption

Patrick Wallek — Thu, 03 Oct 2002 02:36:21 GMT

What do you mean "the password which is transferred in HP UX"?

If you are talking about the password going over the network when someone logs in via telnet or ftp then there is NO encryption. The password goes over the network as clear-text.

The password in the password file is encrypted via the crypt command. See 'man crypt' for more info.

Re: Password Encryption

Animesh Chakraborty — Thu, 03 Oct 2002 02:48:39 GMT

crypt() is the password encryption function. It is based on a one way
hashing encryption algorithm with variations intended (among other
things) to frustrate use of hardware implementations of a key search.

Re: Password Encryption

Jeff Schussele — Thu, 03 Oct 2002 04:03:02 GMT

Hi Joyce,

The password in HP-UX is stored with a single encryption method - crypt as others have pointed out.

Also as they've stated it's transmitted in clear text during normal access methods across the network.

If you want encrypted transmission of the PW, then you need to use openssh as your access method - found at:

http://hpux.cs.utah.edu/hppd/hpux/Networking/Admin/openssh-3.4p1/

HTH,
Jeff